glob
14.0.3 · 28 Oct 2026BlueOak-1.0.0535.7M / weekRepositoryHomepagenpmAtom feed
Your version
11.0.2
23 Apr 202511.1.0 is the newest release of 11.x.
npm marks 11.0.2 as deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
Security
2 advisories affect 11.0.2; 14.0.2 fixes them
- Highglob CLI: Command injection via -c/--cmd executes matches with shell:trueGHSA-5j98-mcp5-4vw2 · 17 Nov 2025Fixed in 11.1.0
- ModerateGlob: AbortSignal cancellation bypass allows post-timeout filesystem traversalGHSA-3g3m-2fjr-6pw4 · 30 Oct 2026Fixed in 14.0.2
Release note
No note was found for 11.0.2 on GitHub or in the repository's changelog.