Skip to content
OpenAdvisories

Package · crates.io

fallow-config

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.3
    GHSA-h4fr-cmh5-qr62

    Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root

    ### Impact Fallow expands some globs from the analyzed repository on disk. Before 3.34.0, a segment such as `.*`, `.?` or `..*` in such a glob also matched the special `..` entry. The `glob` crate tests `..` against a segment that starts with a literal `.`. F…

    fallow fallow-cli fallow-core @fallow-cli/fallow-node npm crates.io