CVE-2020-28469
Fixed in a distro release EPSS 5%CVSS 5.3
This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
Products: gulpjs glob-parent, oracle communications_cloud_native_core_policy
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | glob-parent | 5.1.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | nodejs | 1:16.13.1-3.module_el8.5.0+2605+45d748af |
| AlmaLinux 8 | nodejs | 1:16.13.1-3.module_el8.5.0+246+05401605 |
| AlmaLinux 8 | nodejs | 1:14.18.2-2.module_el8.5.0+254+b4526b16 |
| AlmaLinux 8 | nodejs | 1:14.18.2-2.module_el8.5.0+2618+8d46dafd |
| AlmaLinux 8 | nodejs-devel | 1:16.13.1-3.module_el8.5.0+2605+45d748af |
| AlmaLinux 8 | nodejs-devel | 1:16.13.1-3.module_el8.5.0+246+05401605 |
| AlmaLinux 8 | nodejs-devel | 1:14.18.2-2.module_el8.5.0+2618+8d46dafd |
| AlmaLinux 8 | nodejs-devel | 1:14.18.2-2.module_el8.5.0+254+b4526b16 |
| AlmaLinux 8 | nodejs-docs | 1:16.13.1-3.module_el8.5.0+2605+45d748af |
| AlmaLinux 8 | nodejs-docs | 1:14.18.2-2.module_el8.5.0+254+b4526b16 |
| AlmaLinux 8 | nodejs-docs | 1:14.18.2-2.module_el8.5.0+2618+8d46dafd |
| AlmaLinux 8 | nodejs-docs | 1:16.13.1-3.module_el8.5.0+246+05401605 |
| AlmaLinux 8 | nodejs-full-i18n | 1:14.18.2-2.module_el8.5.0+254+b4526b16 |
| AlmaLinux 8 | nodejs-full-i18n | 1:14.18.2-2.module_el8.5.0+2618+8d46dafd |
| AlmaLinux 8 | nodejs-full-i18n | 1:16.13.1-3.module_el8.5.0+246+05401605 |
| AlmaLinux 8 | nodejs-full-i18n | 1:16.13.1-3.module_el8.5.0+2605+45d748af |
| AlmaLinux 8 | nodejs-nodemon | 2.0.15-1.module_el8.5.0+2605+45d748af |
| AlmaLinux 8 | nodejs-nodemon | 2.0.15-1.module_el8.6.0+2904+f21ad6f4 |
| AlmaLinux 8 | nodejs-nodemon | 2.0.15-1.module_el8.5.0+2618+8d46dafd |
| AlmaLinux 8 | nodejs-packaging | 25-1.module_el8.5.0+2605+45d748af |
| AlmaLinux 8 | nodejs-packaging | 25-1.module_el8.5.0+246+05401605 |
| AlmaLinux 8 | nodejs-packaging | 23-3.module_el8.5.0+2618+8d46dafd |
| AlmaLinux 8 | nodejs-packaging | 23-3.module_el8.4.0+2522+3bd42762 |
| AlmaLinux 8 | npm | 1:8.1.2-1.16.13.1.3.module_el8.5.0+246+05401605 |
| AlmaLinux 8 | npm | 1:8.1.2-1.16.13.1.3.module_el8.5.0+2605+45d748af |
| AlmaLinux 8 | npm | 1:6.14.15-1.14.18.2.2.module_el8.5.0+2618+8d46dafd |
| AlmaLinux 8 | npm | 1:6.14.15-1.14.18.2.2.module_el8.5.0+254+b4526b16 |
| AlmaLinux 9 | nodejs | 1:16.16.0-1.el9_0 |
| AlmaLinux 9 | nodejs-docs | 1:16.16.0-1.el9_0 |
| AlmaLinux 9 | nodejs-full-i18n | 1:16.16.0-1.el9_0 |
| AlmaLinux 9 | nodejs-libs | 1:16.16.0-1.el9_0 |
| AlmaLinux 9 | nodejs-nodemon | 2.0.19-1.el9_0 |
| AlmaLinux 9 | npm | 1:8.11.0-1.16.16.0.1.el9_0 |
| Debian 12 | node-glob-parent | 5.1.1+~5.1.0-2 |
| Debian 13 | node-glob-parent | 5.1.1+~5.1.0-2 |
| Debian 14 | node-glob-parent | 5.1.1+~5.1.0-2 |
| Red Hat Enterprise Linux 8 | nodejs | 1:16.13.1-3.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 8 | nodejs | 1:14.18.2-2.module+el8.5.0+13644+8d46dafd |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:14.18.2-2.module+el8.5.0+13644+8d46dafd |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:16.13.1-3.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:16.13.1-3.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:14.18.2-2.module+el8.5.0+13644+8d46dafd |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:14.18.2-2.module+el8.5.0+13644+8d46dafd |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:16.13.1-3.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:14.18.2-2.module+el8.5.0+13644+8d46dafd |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:16.13.1-3.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:14.18.2-2.module+el8.5.0+13644+8d46dafd |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:16.13.1-3.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:2.0.15-1.module+el8.5.0+13504+a2e74d91 |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:2.0.15-1.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:25-1.module+el8.5.0+10992+fac5fe06 |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:23-3.module+el8.3.0+6519+9f98ed83 |
| Red Hat Enterprise Linux 8 | npm | 1:6.14.15-1.14.18.2.2.module+el8.5.0+13644+8d46dafd |
| Red Hat Enterprise Linux 8 | npm | 1:8.1.2-1.16.13.1.3.module+el8.5.0+13548+45d748af |
| Red Hat Enterprise Linux 9 | nodejs | 1:16.16.0-1.el9_0 |
| Red Hat Enterprise Linux 9 | nodejs-debuginfo | 1:16.16.0-1.el9_0 |
| Red Hat Enterprise Linux 9 | nodejs-debugsource | 1:16.16.0-1.el9_0 |
| Red Hat Enterprise Linux 9 | nodejs-docs | 1:16.16.0-1.el9_0 |
| Red Hat Enterprise Linux 9 | nodejs-full-i18n | 1:16.16.0-1.el9_0 |
| Red Hat Enterprise Linux 9 | nodejs-libs | 1:16.16.0-1.el9_0 |
| Red Hat Enterprise Linux 9 | nodejs-libs-debuginfo | 1:16.16.0-1.el9_0 |
| Red Hat Enterprise Linux 9 | nodejs-nodemon | 0:2.0.19-1.el9_0 |
| Red Hat Enterprise Linux 9 | npm | 1:8.11.0-1.16.16.0.1.el9_0 |
| Red Hat rhel eus 8.4 | nodejs | 1:14.18.2-2.module+el8.4.0+13643+6c0ebf22 |
| Red Hat rhel eus 8.4 | nodejs-debuginfo | 1:14.18.2-2.module+el8.4.0+13643+6c0ebf22 |
| Red Hat rhel eus 8.4 | nodejs-debugsource | 1:14.18.2-2.module+el8.4.0+13643+6c0ebf22 |
| Red Hat rhel eus 8.4 | nodejs-devel | 1:14.18.2-2.module+el8.4.0+13643+6c0ebf22 |
| Red Hat rhel eus 8.4 | nodejs-docs | 1:14.18.2-2.module+el8.4.0+13643+6c0ebf22 |
| Red Hat rhel eus 8.4 | nodejs-full-i18n | 1:14.18.2-2.module+el8.4.0+13643+6c0ebf22 |
| Red Hat rhel eus 8.4 | nodejs-nodemon | 0:2.0.15-1.module+el8.4.0+13503+fc29810b |
| Red Hat rhel eus 8.4 | nodejs-packaging | 0:23-3.module+el8.3.0+6519+9f98ed83 |
| Red Hat rhel eus 8.4 | npm | 1:6.14.15-1.14.18.2.2.module+el8.4.0+13643+6c0ebf22 |
| Red Hat rhel software collections 3 | rh-nodejs12-nodejs | 0:12.22.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs12-nodejs-debuginfo | 0:12.22.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs12-nodejs-devel | 0:12.22.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs12-nodejs-docs | 0:12.22.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs12-nodejs-nodemon | 0:2.0.3-5.el7 |
| Red Hat rhel software collections 3 | rh-nodejs12-npm | 0:6.14.14-12.22.5.1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs14-nodejs | 0:14.17.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs14-nodejs-debuginfo | 0:14.17.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs14-nodejs-devel | 0:14.17.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs14-nodejs-docs | 0:14.17.5-1.el7 |
| Red Hat rhel software collections 3 | rh-nodejs14-nodejs-nodemon | 0:2.0.3-5.el7 |
| Red Hat rhel software collections 3 | rh-nodejs14-npm | 0:6.14.14-14.17.5.1.el7 |
| Red Hat rhev manager 4.4 el8 | ovirt-engine-ui-extensions | 0:1.2.7-1.el8ev |
| Red Hat rhev manager 4.4 el8 | ovirt-web-ui | 0:1.7.2-1.el8ev |
| Rocky Linux 8 | nodejs | 1:16.13.1-3.module+el8.5.0+721+4c107270 |
| Rocky Linux 8 | nodejs | 1:14.18.2-2.module+el8.5.0+733+de4fee6c |
| Rocky Linux 8 | nodejs-nodemon | 0:2.0.15-1.module+el8.5.0+721+4c107270 |
| Rocky Linux 8 | nodejs-packaging | 0:25-1.module+el8.6.0+1046+80feca58 |
| Rocky Linux 8 | nodejs-packaging | 0:25-1.module+el8.5.0+702+221f14e6 |
| Rocky Linux 8 | nodejs-packaging | 0:23-3.module+el8.7.0+1071+4bdda2a8 |
| Rocky Linux 8 | nodejs-packaging | 0:23-3.module+el8.3.0+100+234774f7 |
| Rocky Linux 8 | nodejs-packaging | 0:23-3.module+el8.5.0+733+de4fee6c |
| Rocky Linux 9 | nodejs-nodemon | 0:2.0.19-1.el9_0 |