Description
Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c <command> <patterns> are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in versions 10.5.0 and 11.1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| isaacs | node-glob | >= 10.2.0, < 10.5.0, >= 11.0.0, < 11.1.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | opa | 1.11.0-1.1 | openSUSE-SU-2025:15775-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.22 | npm | 11.6.4-r0 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | jupyter-base-notebook | 7.6.3-r2 | — |
| Wolfi rolling | lerna | 9.0.1-r1 | — |
| Wolfi rolling | node-gyp | 12.2.0-r0 | — |
| Wolfi rolling | npm | 11.6.3-r0 | — |
| Wolfi rolling | npm-doc | 11.6.4-r0 | — |
| Wolfi rolling | pnpm-stage0 | No fix yet | — |
| Wolfi rolling | prism | 5.14.3-r1 | — |
| Wolfi rolling | pulumi +3 | 3.209.0-r0 | — |
| Wolfi rolling | py3.10-jupyterlab +3 | 4.6.1-r1 | — |
| Wolfi rolling | renovate | 42.14.2-r0 | — |
| Wolfi rolling | saf | 1.5.2-r0 | — |
| Wolfi rolling | ts-patch | 4.0.1-r0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | glob | >= 11.0.0, < 11.1.0 | 11.1.0 | GHSA-5j98-mcp5-4vw2 |
| npm | glob | >= 10.2.0, < 10.5.0 | 10.5.0 | GHSA-5j98-mcp5-4vw2 |
Advisories 10
- WID-SEC-2026-3046 IBM Concert: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026
- WID-SEC-2025-2798 Red Hat OpenShift Service Mesh: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 22, 2026
- WID-SEC-2026-0105 Red Hat Developer Hub: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 15, 2026
- WID-SEC-2026-0778 Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- WID-SEC-2025-2909 IBM App Connect Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 7, 2026
- openSUSE-SU-2025:15775-1 opa-1.11.0-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- WID-SEC-2026-0767 Atlassian Confluence: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Mar 17, 2026
- ICSA-26-071-03 Siemens SIDIS Prime CISA ICS & IT advisories · Mar 12, 2026
- NCSC-2026-0079 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 10, 2026
- SSA-485750 SSA-485750: Multiple Vulnerabilities in SIDIS Prime Before V4.0.800 Siemens ProductCERT · Mar 10, 2026