This repository has been archived by the owner on Jul 21, 2023. It is now read-only.
CVE-2020-28469 (High) detected in glob-parent-2.0.0.tgz #1168
Labels
Mend: dependency security vulnerability
Security vulnerability detected by WhiteSource
CVE-2020-28469 - High Severity Vulnerability
Vulnerable Library - glob-parent-2.0.0.tgz
Strips glob magic from a string to provide the parent path
Library home page: https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz
Dependency Hierarchy:
Found in HEAD commit: 63bdcc254e4f79ed8aca650620a1d185cb267336
Found in base branch: master
Vulnerability Details
This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
Publish Date: 2021-06-03
URL: CVE-2020-28469
CVSS 3 Score Details (7.5)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28469
Release Date: 2021-06-03
Fix Resolution: glob-parent - 5.1.2
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: