{"action":"Upgrade glob-parent to 5.1.2 or later.","affected":[{"fixed":"5.1.2","introduced":"4.0.0"}],"component":"glob-parent","cve_ids":["CVE-2020-28469"],"ecosystem":"npm","epss":0.04579,"exploited":false,"fixed_versions":["5.1.2"],"ghsa_id":"GHSA-ww39-953v-wcq6","id":"tcs_01M5KGG48KVF4M59BSN8KDZE8J","modified_at":"2025-01-14T08:57:10.357296Z","published_at":"2021-06-07T21:56:34Z","references":["https://osv.dev/vulnerability/GHSA-ww39-953v-wcq6","https://nvd.nist.gov/vuln/detail/CVE-2020-28469","https://github.com/gulpjs/glob-parent/pull/36","https://github.com/gulpjs/glob-parent/pull/36/commits/c6db86422a9731d4f3d332ce4a81c27ea6b0ee46","https://github.com/gulpjs/glob-parent/commit/4a80667c69355c76a572a5892b0f133c8e1f457e","https://github.com/gulpjs/glob-parent","https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9","https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092","https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905","https://www.oracle.com/security-alerts/cpujan2022.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-ww39-953v-wcq6","url":"https://osv.dev/vulnerability/GHSA-ww39-953v-wcq6"}],"summary":"glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex"}