glob
14.0.3 · 28 Oct 2026BlueOak-1.0.0535.7M / weekRepositoryHomepagenpmAtom feed
Your version
10.5.0
18 Nov 2025npm marks 10.5.0 as deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
Security
Fixes 1 advisory that affected 10.4.5
- Highglob CLI: Command injection via -c/--cmd executes matches with shell:trueGHSA-5j98-mcp5-4vw2 · 17 Nov 2025Fixed in 10.5.0
1 advisory affects 10.5.0; 14.0.2 fixes them
- ModerateGlob: AbortSignal cancellation bypass allows post-timeout filesystem traversalGHSA-3g3m-2fjr-6pw4 · 30 Oct 2026Fixed in 14.0.2
Release note
No note was found for 10.5.0 on GitHub or in the repository's changelog.