PT-2022-10388

CVE-2021-35065

·

Published

2022-07-18

·

Updated

2025-12-19

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions glob-parent versions prior to 6.0.1
Description The issue allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression in the glob-parent package for Node.js.
Recommendations For versions prior to 6.0.1, update to version 6.0.1 to resolve the issue. As a temporary workaround, consider restricting the use of regular expressions in the enclosure until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-CJ88-88MR-972W
ALSA-2023:1582
ALSA-2023:1583
ALSA-2023:1743
ALSA-2023:2654
BIT-GULP-2021-35065
CESA-2023_1582
CESA-2023_1583
CESA-2023_1743
RHSA-2023:0612
RHSA-2023:1043
RHSA-2023:1044
RHSA-2023:1045
RHSA-2023:1533
RHSA-2023:1582
RHSA-2023_1582
RHSA-2023:1583
RHSA-2023_1583
RHSA-2023:1742
RHSA-2023:1743
RHSA-2023_1743
RHSA-2023:2654
RHSA-2023_2654
RHSA-2023:2655
RHSA-2023_2655
RLSA-2023:1582
RLSA-2023:1583
RLSA-2023:1743
Found an issue in the description? Have something to add? Feel free to write us 👾