EUVD-2022-6318

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

glob-parent package before 6.0.1 in Node.js allows ReDoS attacks on enclosure regular expression

Reporter	Title	Published	Views	Family All 157
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js	30 Nov 202116:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities	18 Feb 202220:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Color-String, and PostgreSQL affect IBM Spectrum Protect Plus	10 Dec 202120:01	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	26 Mar 202503:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	15 Apr 202503:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js glob-parent denial of service vulnerability( CVE-2021-35065)	5 Jul 202322:16	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "55433782-b258-3b27-8604-cb1237b9a9ba",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "71baccfa-1b40-3093-88dc-6cfa75d36831",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-35065
github	www.github.com/opensearch-project/OpenSearch-Dashboards/issues/1103
github	www.github.com/gulpjs/glob-parent/pull/49
github	www.github.com/gulpjs/glob-parent/commit/32f6d52663b7addac38d0dff570d8127edf03f47
github	www.github.com/gulpjs/glob-parent/commit/3e9f04a3b4349db7e1962d87c9a7398cda51f339
github	www.github.com/gulpjs/glob-parent
github	www.github.com/gulpjs/glob-parent/releases/tag/v6.0.1
security	www.security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294
mend	www.mend.io/vulnerability-database/CVE-2021-35065
access	www.access.redhat.com/errata/RHSA-2023:0612

03 Oct 2025 20:07Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.00416

SSVC

node.js package vulnerability redos regular expression