VYPR

node-glob

by Isaacs

Source repositories

CVEs (1)

  • CVE-2026-118773MedOct 29, 2026
    risk 0.34cvss —epss 0.00

    Glob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/walker.ts, including GlobUtil.walkCB(), GlobUtil.walkCB2(), GlobUtil.walkCBSync(), and GlobUtil.walkCB2Sync(), invoke the callbacks without returning. After AbortSignal or…