Skip to content

glob CLI: Command injection via -c/--cmd executes matches with shell:true

High severity GitHub Reviewed Published Nov 17, 2025 in isaacs/node-glob • Updated Nov 19, 2025

No closed alerts for this advisory

Give feedback on Dependabot alerts