Vulnerabilities

TI-2021-14025 CVE-2021-35065 · GHSA-cj88-88mr-972w

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial…

HIGH 66

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01696 Published 2022-12-26 Partial fix · 6.0.1 CWE-1333

TI-2020-17282 CVE-2020-28469 · GHSA-ww39-953v-wcq6

Regular expression denial of service (ReDoS) in glob-parent

MEDIUM 40

This affects the package glob-parent before 5.1.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04579 Published 2021-06-03 Partial fix · 5.1.2 CWE-400

TI-2020-17306 CVE-2020-28503 · GHSA-897m-rjf5-jp39

Prototype pollution in copy-props

MEDIUM 45

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01697 Published 2021-03-23 Fixed in 2.0.5 CWE-1321

Vulnerabilities

Filters

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial…

Regular expression denial of service (ReDoS) in glob-parent

Prototype pollution in copy-props