glob
14.0.3 · 28 Oct 2026BlueOak-1.0.0535.7M / weekRepositoryHomepagenpmAtom feed
Your version
10.2.5
17 May 202310.5.0 is the newest release of 10.x.
npm marks 10.2.5 as deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
Security
2 advisories affect 10.2.5; 14.0.2 fixes them
- Highglob CLI: Command injection via -c/--cmd executes matches with shell:trueGHSA-5j98-mcp5-4vw2 · 17 Nov 2025Fixed in 10.5.0
- ModerateGlob: AbortSignal cancellation bypass allows post-timeout filesystem traversalGHSA-3g3m-2fjr-6pw4 · 30 Oct 2026Fixed in 14.0.2
Release note
No note was found for 10.2.5 on GitHub or in the repository's changelog.