2 results · Feed
-
High 7.5
glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
-
Medium 5.3
Regular Expression Denial of Service (ReDoS)
This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.