Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Gulpjs records in CISA KEVNo Gulpjs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 66
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01696 · Published 2022-12-26 · Partial fix · 6.0.1 CWE-1333
Priority MEDIUM 40
This affects the package glob-parent before 5.1.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04579 · Published 2021-06-03 · Partial fix · 5.1.2 CWE-400
Open these records in search →