Search for packages
| purl | pkg:deb/debian/node-glob-parent@3.0.1-1 |
| Next non-vulnerable version | 6.0.2+~5.1.1-2 |
| Latest non-vulnerable version | 6.0.2+~5.1.1-2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4f1w-xpyy-2fcf
Aliases: CVE-2020-28469 GHSA-ww39-953v-wcq6 |
glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-15T17:09:10.633727+00:00 | Debian Oval Importer | Affected by | VCID-4f1w-xpyy-2fcf | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.4.0 |
| 2026-04-11T16:55:44.651434+00:00 | Debian Oval Importer | Affected by | VCID-4f1w-xpyy-2fcf | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.3.0 |
| 2026-04-08T16:45:29.410797+00:00 | Debian Oval Importer | Affected by | VCID-4f1w-xpyy-2fcf | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 38.1.0 |