GHSA-cj88-88mr-972w high
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
Affected range
SEMVER: introduced 6.0.0; fixed 6.0.1Fixed versions: 6.0.1
Extract the non-magic parent path from a glob string.
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
6.0.2
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
High
2 active advisories
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
SEMVER: introduced 6.0.0; fixed 6.0.1Fixed versions: 6.0.1
Affected range
SEMVER: introduced 4.0.0; fixed 5.1.2Fixed versions: 5.1.2