Alpine/npm: high 7.5
Glob matches files using patterns the shell uses. Starting in version 10.2.0 and prior to versions 10.5.0 and 11.1.0, the glob CLI contains a command injection vulnerability in its -c/--cmd option tha
Action: Upgrade npm to 11.6.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.6.4-r0 | - |
Fixed versions
| 11.6.4-r0 |
Sources
published · modified · JSON