Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-35065

Fixed in a distro release EPSS 2%CVSS 7.5

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Published 2022-12-26 · CVE record · OSV

Products: gulpjs glob-parent

Fixed upstream

EcosystemPackageFixed in
npmglob-parent6.0.1

Distro releases

ReleasePackageFixed in
AlmaLinux 8nodejs1:16.19.1-1.module_el8.7.0+3496+a59a3324
AlmaLinux 8nodejs1:18.14.2-2.module_el8.7.0+3497+c65299e7
AlmaLinux 8nodejs1:14.21.3-1.module_el8.7.0+3551+53700ee8
AlmaLinux 8nodejs-devel1:16.19.1-1.module_el8.7.0+3496+a59a3324
AlmaLinux 8nodejs-devel1:18.14.2-2.module_el8.7.0+3497+c65299e7
AlmaLinux 8nodejs-devel1:14.21.3-1.module_el8.7.0+3551+53700ee8
AlmaLinux 8nodejs-docs1:16.19.1-1.module_el8.7.0+3496+a59a3324
AlmaLinux 8nodejs-docs1:18.14.2-2.module_el8.7.0+3497+c65299e7
AlmaLinux 8nodejs-docs1:14.21.3-1.module_el8.7.0+3551+53700ee8
AlmaLinux 8nodejs-full-i18n1:16.19.1-1.module_el8.7.0+3496+a59a3324
AlmaLinux 8nodejs-full-i18n1:18.14.2-2.module_el8.7.0+3497+c65299e7
AlmaLinux 8nodejs-full-i18n1:14.21.3-1.module_el8.7.0+3551+53700ee8
AlmaLinux 8nodejs-nodemon2.0.20-3.module_el8.7.0+3496+a59a3324
AlmaLinux 8nodejs-nodemon2.0.20-2.module_el8.7.0+3497+c65299e7
AlmaLinux 8nodejs-nodemon2.0.20-3.module_el8.7.0+3551+53700ee8
AlmaLinux 8nodejs-packaging25-1.module_el8.5.0+2605+45d748af
AlmaLinux 8nodejs-packaging2021.06-4.module_el8.7.0+3343+ea2b7901
AlmaLinux 8nodejs-packaging23-3.module_el8.4.0+2522+3bd42762
AlmaLinux 8nodejs-packaging-bundler2021.06-4.module_el8.7.0+3343+ea2b7901
AlmaLinux 8npm1:8.19.3-1.16.19.1.1.module_el8.7.0+3496+a59a3324
AlmaLinux 8npm1:9.5.0-1.18.14.2.2.module_el8.7.0+3497+c65299e7
AlmaLinux 8npm1:6.14.18-1.14.21.3.1.module_el8.7.0+3551+53700ee8
AlmaLinux 9nodejs1:18.14.2-2.module_el9.2.0+29+de583a0b
AlmaLinux 9nodejs-devel1:18.14.2-2.module_el9.2.0+29+de583a0b
AlmaLinux 9nodejs-docs1:18.14.2-2.module_el9.2.0+29+de583a0b
AlmaLinux 9nodejs-full-i18n1:18.14.2-2.module_el9.2.0+29+de583a0b
AlmaLinux 9nodejs-nodemon2.0.20-2.module_el9.2.0+29+de583a0b
AlmaLinux 9nodejs-packaging2021.06-4.module_el9.1.0+13+d9a595ea
AlmaLinux 9nodejs-packaging-bundler2021.06-4.module_el9.1.0+13+d9a595ea
AlmaLinux 9npm1:9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b
Debian 12node-glob-parent6.0.2+~5.1.1-1
Debian 13node-glob-parent6.0.2+~5.1.1-1
Debian 14node-glob-parent6.0.2+~5.1.1-1
Red Hat Enterprise Linux 8nodejs1:14.21.3-1.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 8nodejs1:16.19.1-1.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8nodejs1:18.14.2-2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8nodejs-debuginfo1:18.14.2-2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8nodejs-debuginfo1:14.21.3-1.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 8nodejs-debuginfo1:16.19.1-1.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8nodejs-debugsource1:14.21.3-1.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 8nodejs-debugsource1:18.14.2-2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8nodejs-debugsource1:16.19.1-1.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8nodejs-devel1:14.21.3-1.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 8nodejs-devel1:18.14.2-2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8nodejs-devel1:16.19.1-1.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8nodejs-docs1:16.19.1-1.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8nodejs-docs1:18.14.2-2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8nodejs-docs1:14.21.3-1.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 8nodejs-full-i18n1:18.14.2-2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8nodejs-full-i18n1:16.19.1-1.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8nodejs-full-i18n1:14.21.3-1.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 8nodejs-nodemon0:2.0.20-3.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8nodejs-nodemon0:2.0.20-3.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 8nodejs-nodemon0:2.0.20-2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8nodejs-packaging0:25-1.module+el8.5.0+10992+fac5fe06
Red Hat Enterprise Linux 8nodejs-packaging0:23-3.module+el8.3.0+6519+9f98ed83
Red Hat Enterprise Linux 8nodejs-packaging0:2021.06-4.module+el8.7.0+15582+19c314fa
Red Hat Enterprise Linux 8nodejs-packaging-bundler0:2021.06-4.module+el8.7.0+15582+19c314fa
Red Hat Enterprise Linux 8npm1:8.19.3-1.16.19.1.1.module+el8.7.0+18373+704f5cef
Red Hat Enterprise Linux 8npm1:9.5.0-1.18.14.2.2.module+el8.7.0+18445+9493b6ea
Red Hat Enterprise Linux 8npm1:6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6
Red Hat Enterprise Linux 9nodejs1:16.19.1-1.el9_2
Red Hat Enterprise Linux 9nodejs1:18.14.2-2.module+el9.2.0.z+18497+a402347c
Red Hat Enterprise Linux 9nodejs-debuginfo1:18.14.2-2.module+el9.2.0.z+18497+a402347c
Red Hat Enterprise Linux 9nodejs-debuginfo1:16.19.1-1.el9_2
Red Hat Enterprise Linux 9nodejs-debugsource1:18.14.2-2.module+el9.2.0.z+18497+a402347c
Red Hat Enterprise Linux 9nodejs-debugsource1:16.19.1-1.el9_2
Red Hat Enterprise Linux 9nodejs-devel1:18.14.2-2.module+el9.2.0.z+18497+a402347c
Red Hat Enterprise Linux 9nodejs-docs1:18.14.2-2.module+el9.2.0.z+18497+a402347c
Red Hat Enterprise Linux 9nodejs-docs1:16.19.1-1.el9_2
Red Hat Enterprise Linux 9nodejs-full-i18n1:16.19.1-1.el9_2
Red Hat Enterprise Linux 9nodejs-full-i18n1:18.14.2-2.module+el9.2.0.z+18497+a402347c
Red Hat Enterprise Linux 9nodejs-libs1:16.19.1-1.el9_2
Red Hat Enterprise Linux 9nodejs-libs-debuginfo1:16.19.1-1.el9_2
Red Hat Enterprise Linux 9nodejs-nodemon0:2.0.20-3.el9_2
Red Hat Enterprise Linux 9nodejs-nodemon0:2.0.20-2.module+el9.2.0.z+18497+a402347c
Red Hat Enterprise Linux 9nodejs-packaging0:2021.06-4.module+el9.1.0+15718+e52ec601
Red Hat Enterprise Linux 9nodejs-packaging-bundler0:2021.06-4.module+el9.1.0+15718+e52ec601
Red Hat Enterprise Linux 9npm1:8.19.3-1.16.19.1.1.el9_2
Red Hat Enterprise Linux 9npm1:9.5.0-1.18.14.2.2.module+el9.2.0.z+18497+a402347c
Red Hat red hat single sign on 7.6rh-sso7-keycloak0:18.0.6-1.redhat_00001.1.el9sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak0:18.0.6-1.redhat_00001.1.el7sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak0:18.0.6-1.redhat_00001.1.el8sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak-server0:18.0.6-1.redhat_00001.1.el8sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak-server0:18.0.6-1.redhat_00001.1.el9sso
Red Hat red hat single sign on 7.6rh-sso7-keycloak-server0:18.0.6-1.redhat_00001.1.el7sso
Red Hat rhel eus 8.4nodejs1:14.21.3-1.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.4nodejs-debuginfo1:14.21.3-1.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.4nodejs-debugsource1:14.21.3-1.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.4nodejs-devel1:14.21.3-1.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.4nodejs-docs1:14.21.3-1.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.4nodejs-full-i18n1:14.21.3-1.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.4nodejs-nodemon0:2.0.20-3.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.4nodejs-packaging0:23-3.module+el8.3.0+6519+9f98ed83
Red Hat rhel eus 8.4npm1:6.14.18-1.14.21.3.1.module+el8.4.0+18317+43f5ac16
Red Hat rhel eus 8.6nodejs1:14.21.3-1.module+el8.6.0+18532+cbe6f646
Red Hat rhel eus 8.6nodejs-debuginfo1:14.21.3-1.module+el8.6.0+18532+cbe6f646
Red Hat rhel eus 8.6nodejs-debugsource1:14.21.3-1.module+el8.6.0+18532+cbe6f646
Red Hat rhel eus 8.6nodejs-devel1:14.21.3-1.module+el8.6.0+18532+cbe6f646
Red Hat rhel eus 8.6nodejs-docs1:14.21.3-1.module+el8.6.0+18532+cbe6f646
Red Hat rhel eus 8.6nodejs-full-i18n1:14.21.3-1.module+el8.6.0+18532+cbe6f646
Red Hat rhel eus 8.6nodejs-nodemon0:2.0.20-3.module+el8.6.0+18532+cbe6f646
Red Hat rhel eus 8.6nodejs-packaging0:23-3.module+el8.3.0+6519+9f98ed83
Red Hat rhel eus 8.6npm1:6.14.18-1.14.21.3.1.module+el8.6.0+18532+cbe6f646
Red Hat rhel software collections 3rh-nodejs14-nodejs0:14.21.1-3.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-debuginfo0:14.21.1-3.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-devel0:14.21.1-3.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-docs0:14.21.1-3.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-full-i18n0:14.21.1-3.el7
Red Hat rhel software collections 3rh-nodejs14-nodejs-nodemon0:2.0.20-2.el7
Red Hat rhel software collections 3rh-nodejs14-npm0:6.14.17-14.21.1.3.el7
Rocky Linux 8nodejs1:18.14.2-2.module+el8.7.0+1177+510ae886
Rocky Linux 8nodejs1:14.21.3-1.module+el8.7.0+1183+c2c35f0a
Rocky Linux 8nodejs1:16.19.1-1.module+el8.7.0+1178+d52dba78
Rocky Linux 8nodejs-nodemon0:2.0.20-3.module+el8.7.0+1178+d52dba78
Rocky Linux 8nodejs-nodemon0:2.0.20-2.module+el8.7.0+1108+49363b0d
Rocky Linux 8nodejs-packaging0:23-3.module+el8.7.0+1071+4bdda2a8
Rocky Linux 8nodejs-packaging0:2021.06-4.module+el8.7.0+1072+5b168780
Rocky Linux 8nodejs-packaging0:25-1.module+el8.6.0+1046+80feca58
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.7.0+40025+0e0cf6b2
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.7.0+40017+f0db1785
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.7.0+40018+a011993d
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.7.0+40022+9ecc286c
Ubuntu 18.04 LTSnode-glob-parentno fix
Ubuntu 20.04 LTSnode-glob-parentno fix