DoS (Denial of Service) glob-parent Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 5.15.2, 5.16.0, 5.17.0, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, and 11.2.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVS...

MiracleLinux 9 : nodejs:18 (AXSA:2023-6072:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6072:01 advisory. glob-parent: Regular Expression Denial of Service CVE-2021-35065 c-ares: buffer overflow in configsortlist due to missing string length check...

RockyLinux 9 : nodejs:18 (RLSA-2023:2654)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:2654 advisory. glob-parent: Regular Expression Denial of Service CVE-2021-35065 c-ares: buffer overflow in configsortlist due to missing string length check CVE-2022-49...

EUVD-2021-1421

Malware in sbrugna...

glob-parent: Regular Expression Denial of Service

A vulnerability was found in the glob-parent package. Affected versions of this package are vulnerable to Regular expression Denial of Service ReDoS attacks, affecting system availability...

DEBIAN-CVE-2021-35065

The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...

@aisino/cli-plugin-unit-mocha (>=0.0.1 <=1.0.15), @aws-amplify/cli (=4.44.1-beta.0) +29 more potentially affected by CVE-2020-28469 via glob-parent (>=5.0.0 <=5.1.1)

glob-parent NPM version =5.0.0, =0.0.1, =0.0.1, =5.0.1, =0.6.1, =0.14.0, =26.4.0, =0.0.2, =4.0.0, =1.0.0, =2.21.3-beta.0, =2.22.2-dev.11 - amplify-provider-awscloudformation =4.39.1-beta.0 - amplify-util-mock =3.28.1-beta.0 and more Source cves: CVE-2020-28469 Source advisory:...

Regular Expression Denial of Service (ReDoS)

Overview glob-parent is a package that helps extracting the non-magic parent path from a glob string. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS. The enclosure regex used to check for strings ending in enclosure containing path separator. PoC by...