Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Gulpjs records in CISA KEVNo Gulpjs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 66
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01696 · Published 2022-12-26 · Partial fix · 6.0.1 CWE-1333
Priority MEDIUM 45
The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01697 · Published 2021-03-23 · Fixed in 2.0.5 CWE-1321
Priority MEDIUM 40
This affects the package glob-parent before 5.1.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04579 · Published 2021-06-03 · Partial fix · 5.1.2 CWE-400
