the most correct and second fastest glob implementation in JavaScript
90%
Total Score
99
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
CVE-2025-64756 glob is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 11.0.0 - 11.1.0 and 10.2.0 - 10.5.0. | 10.2.0 - 10.5.011.0.0 - 11.1.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
minipass Version ^7.1.3 | — | — |
minimatch Version ^10.2.2 | — | — |
path-scurry Version ^2.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant