glob
14.0.3 · 28 Oct 2026BlueOak-1.0.0535.7M / weekRepositoryHomepagenpmAtom feed
Your version
11.1.0
17 Nov 2025npm marks 11.1.0 as deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
Security
Fixes 1 advisory that affected 11.0.3
- Highglob CLI: Command injection via -c/--cmd executes matches with shell:trueGHSA-5j98-mcp5-4vw2 · 17 Nov 2025Fixed in 11.1.0
1 advisory affects 11.1.0; 14.0.2 fixes them
- ModerateGlob: AbortSignal cancellation bypass allows post-timeout filesystem traversalGHSA-3g3m-2fjr-6pw4 · 30 Oct 2026Fixed in 14.0.2
Release note
No note was found for 11.1.0 on GitHub or in the repository's changelog.