isaacs node-glob vulnerabilities

2 published CVEs name isaacs node-glob among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20251
20261

Newest CVEs

CVE-2026-118773
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
isaacs · node-glob
Medium6.3
CVE-2025-64756
glob CLI: Command injection via -c/--cmd executes matches with shell:true
isaacs · node-glob
High7.5

Most common weaknesses