CVE-2026-118773

The node-glob library (versions 9.0.0 through 14.0.2 ) is vulnerable to a cancellation bypass in its src/walker.ts component. Specifically, abort branches within functions like GlobUtil.walkCB() , GlobUtil.walkCB2() , GlobUtil.walkCBSync() , and GlobUtil.walkCB2Sync() fail to return correctly whe...