GitHub Advisoryadvisory · npm

GHSA-ww39-953v-wcq6 glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

HIGH Published 2021-06-07 Modified 2024-06-27 Official page ↗
Aliases
CVE-2020-28469
Ecosystem
npm
Packages
glob-parent
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-06-04

Affected packages

• npm glob-parent: >= 4.0.0, < 5.1.2 → fixed in 5.1.2

Description

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

Related

Alias · CVE (1)

  • CVE-2020-28469 This affects the package glob-parent before 5.1.2. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References