The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-packagingUpgrade nodejsUpgrade npmUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-full-i18n | Apr 21, 2023 | Dec 26, 2022 |
| Centos_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-develUpgrade nodejs-debugsource | Apr 10, 2023 | Dec 26, 2022 |
| Debian | — | Upgrade node-glob-parent | Jul 30, 2024 | Dec 26, 2022 |
| Oracle_linux | — | Upgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-full-i18n | Apr 5, 2023 | Dec 26, 2022 |
| Redhat_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-develUpgrade nodejs-libsUpgrade npmUpgrade nodejs-docsUpgrade nodejs-debugsourceNo solution existsUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-libs-debuginfo | Apr 3, 2023 | Dec 26, 2022 |
| Rocky_linux | — | Upgrade nodejs-full-i18nUpgrade nodejsUpgrade npmUpgrade nodejs-develUpgrade nodejs-debuginfoUpgrade nodejs-debugsource | Mar 12, 2024 | Dec 26, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub