glob-parent (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package glob-parent, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-35065 — CVSS 7.5 (high): The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular…
• CVE-2020-28469 — CVSS 5.3 (medium): This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path…