StackPrism

npm package

glob-parent vulnerabilities by version

The latest release, 6.0.2 (Sep 29, 2021), has no known vulnerabilities. 0% of last week’s 326.1M downloads went to versions with known vulnerabilities. OSV.dev lists 2 advisories for glob-parent; the newest was published on Jul 18, 2022.

npm (opens in a new tab) describes it as “Extract the non-magic parent path from a glob string.”

Latest release
6.0.2
Sep 29, 2021, no known vulnerabilities
Downloads last week
326.1M
All versions, from npm
Advisories on OSV.dev
2
Newest Jul 18, 2022
Licence
ISC
OpenSSF Scorecard
3.7/10
gulpjs/glob-parent (opens in a new tab)

Most-downloaded versions last week

From npm’s per-version download counts for the last 7 days, each checked against OSV.dev. Open a version for its advisories and what to upgrade to.

VersionKnown vulnerabilitiesDownloads
5.1.2Mar 6, 2021No known vulnerabilities168.6M
6.0.2latestSep 29, 2021No known vulnerabilities145.6M
3.1.0Dec 14, 2016No known vulnerabilities7.9M
2.0.0Sep 18, 2015No known vulnerabilities2.3M
5.1.1Mar 21, 20201 known vulnerability, worst rated critical1.1M
5.1.0Sep 21, 20191 known vulnerability, worst rated critical351.4K
5.0.0Mar 29, 20191 known vulnerability, worst rated critical90.7K
6.0.1Jul 20, 2021No known vulnerabilities39K

Who is still on a vulnerable glob-parent

0% of last week’s 326.1M glob-parent downloads went to versions with known vulnerabilities.

From npm’s per-version download counts for the last 7 days, each version checked against OSV.dev. The versions checked cover over 99% of downloads.

Release lines

The newest release of each major line, from the registry. glob-parent doesn’t publish support dates we can check.

LineNewest releaseReleased
66.0.2Sep 29, 2021
55.1.2Mar 6, 2021
44.0.0Mar 27, 2019
33.1.0Dec 14, 2016
22.0.0Sep 18, 2015
11.3.0Sep 18, 2015

Newest advisories

The 2 most recently published, with the versions each one affects.

  1. CriticalCVE-2021-35065 on OSV.dev (opens in a new tab)GHSA-cj88-88mr-972w

    glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

    Affects >= 6.0.0, < 6.0.1. Published Jul 18, 2022.

  2. CriticalCVE-2020-28469 on OSV.dev (opens in a new tab)GHSA-ww39-953v-wcq6

    glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

    Affects >= 4.0.0, < 5.1.2. Published Jun 7, 2021.

Which glob-parent do you have?

Paste a public GitHub repo or drop your package.json and see every vulnerable, end-of-life or deprecated dependency, with one fix task for your coding agent. Free, no sign-up.

Check your whole repo

How this page is checked

StackPrism reads every OSV.dev advisory for glob-parent, merges duplicates filed under several ids, and asks OSV.dev which ones affect each version listed. Releases and their dates come from deps.dev, downloads from npm. No AI writes this page: every sentence comes from that data, refreshed every few hours.

Last checked against OSV.dev, CISA KEV, npm and deps.dev.