The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade npmUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-nodemon | Apr 21, 2023 | Dec 26, 2022 |
| Centos_linux | — | Upgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-full-i18n | Apr 10, 2023 | Dec 26, 2022 |
| Debian | — | Upgrade node-glob-parent | Jul 30, 2024 | Dec 26, 2022 |
| Oracle_linux | — | Upgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-develUpgrade nodejs-nodemon | Apr 5, 2023 | Dec 26, 2022 |
| Redhat_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-debugsourceNo solution existsUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-libs-debuginfoUpgrade nodejs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-devel | Apr 3, 2023 | Dec 26, 2022 |
| Rocky_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-devel | Mar 12, 2024 | Dec 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub