Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-64756

30
FAUCET Score

CVE-2025-64756 is a command injection vulnerability in the isaacs glob CLI, specifically affecting versions 10.2.0 through 10.4.x. When using the -c/--cmd option, maliciously crafted filenames can lead to arbitrary code execution due to improper handling of shell metacharacters. This vulnerability carries a CVSS score of 7.5 (High), indicating a network attack vector, high impact on confidentiality, integrity, and availability, but requires low privileges and high attack complexity. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, with minimal community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
>= 10.2.0, < 10.5.0CPE matchmatch criteria
cpe:2.3:a:isaacs:glob:*:*:*:*:*:node.js:*:*
>= 11.0.0, < 11.1.0CPE matchmatch criteria
cpe:2.3:a:isaacs:glob:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.6
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
3.14%
Probability of exploitation in next 30 days
EPSS Percentile
86.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0314 is in the 84th percentile among its peer group of 1,162 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (128)

github_advisorypatch availablevia nvd_reference
View patch
npmpatch availablevia ghsa
Product: globFixed in: 10.5.0
npmpatch availablevia ghsa
Product: globFixed in: 11.1.0
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:sha256:976d848b56ec7ed32d99deab4b0d5376a97ba6bed29efb941589fe3d395aa524
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/segment-reporting-rhel9:sha256:433385e5a9d3524baea007bf67ea785b2ee76b8218debf21fedf935950ab284e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/rekor-search-ui-rhel9:sha256:1e3a46ade52215e2c78df9229f36301c94099e8397ee74ab99fb8bd504ce7aa2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/segment-reporting-rhel9:sha256:423348319f3ddebd67770f0d74ec7cc245be7a73fd1787793888238407e08508
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.3Fixed in: rhtas/rekor-search-ui-rhel9:sha256:3971738912069448174202486b61ed384153ca18af3e8430a55795a6e65eb58d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.7Fixed in: rhdh/rhdh-hub-rhel9:sha256:29ada5e84c6b204cf518191a21bbd22de5cb53a61bc1812b1072ce5c28a235b2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.8Fixed in: rhdh/rhdh-hub-rhel9:sha256:7185a8f744022307c7a178d35e7ae32d7797eed4f9379b2dba8954e2856f2ed1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Discovery 2Fixed in: discovery/discovery-ui-rhel9:sha256:899bd7f941512d54af8ab369ca03028a7d27d05887ccce24bc12c7ccd3e4dbee
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-feature-server-rhel9:sha256:70a105d801d6d7686a20fb3ce1c52ed4a90d2e8584e77ca96ef62dc02031e1a8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-ml-pipelines-runtime-generic-rhel9:sha256:a1ad3ed847ad3804979a0e401b9b210741ec4424bfd8fccdf9308639e14552ef
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9:sha256:2f59c274dc1b4864be551d7e5ff8e5d4805026e1efe3d63b43775b85f78ec80b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:sha256:f5373ddca575dc4bdb3ebd6910b0665f0a8c3c38454b4d0268c6a97e6f0ec81c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:sha256:fa5bd655d75de3ca930e8c6d79a29a53c35d1ee2a0bb03172068505646b65e13
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:sha256:e621898c4dc4f07ad89d4eadd23c5732bc60cf6f42c8e3fd312463b232fc7740
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:sha256:229f2f2ee3b7e63bf17bf6739f3ee69fc87d9070ace1edec5d766f758e04ade1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:sha256:2f49b2e93ebc766c86404027e25bc433c4a093494c02f18b7c038bda85525cf0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-ta-lmes-job-rhel9:sha256:2f23702cbcf1cecfd365ada4cf9c92840e6f793f613a13b13515fb699ebd56e4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:sha256:aaab63c67b960c96b07521844b358d04e8aef5ded5ac66f8ca33cd50d247bb3d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:sha256:8fbb5bf15f7bd12943907a7a8f25288e994b6abdc990daac43402356d1f09caf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9:sha256:efe11f2cb71974f331ef919df23d85e2db969d1832bb445b35f12f9d5ddfa473
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9:sha256:b72c710b2f2c27dea58d2edd2c515c78198630ffe9b5eae5aa25a26ebbef9460
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9:sha256:5d4a0a19aeb546b6a03efe003dd01826353968c91091773718f7603666efce46
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:sha256:af5beb652ee1f816bd0acac5b98866cb2ed45df4726bb8fe414f5f14f67cfe5e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:sha256:4e72a3976189c1b75260e6926eed40b1817ebbbd6f990e63874ac1452d9cb8c1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:sha256:346a4fdde7d4c3d3afba71760edf44730745eb8fde86ec6476a668cea607e7ba
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:sha256:227ef502cc266d18541445091e618df4c25430e50698ab02c519f32bef38b0b1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:sha256:1ecfb6fd3f5f223ff60e90e9ed45d393447f95de6b91451c1614bc69e042ec95
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:sha256:b5ff184f041cb2c1841add86fcbdeed37402cb0df365e99d1909c3e744f49892
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26Fixed in: devspaces/code-rhel9:sha256:aa1d96a9c1d9dbf2fe077748807de1e047a17a942a87688c269aa60537b5c6d4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26Fixed in: devspaces/dashboard-rhel9:sha256:998779815c5a7888b80f635b942a7409733a839f4c7253a7b5ff920129f987ea
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26Fixed in: devspaces/openvsx-rhel9:sha256:ffe5740d684ac4a1b6c440bb4d2ca3ec20d71c008e65fa73f5143c43a7bda339
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26Fixed in: devspaces/pluginregistry-rhel9:sha256:870546a61219ce727b59586e31edb8cbc653ce72264b23a89a916d04a0627fe0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Pipelines 1.19Fixed in: openshift-pipelines/pipelines-hub-db-migration-rhel9:sha256:5aa846a80b2fe91a9eb3ea20496ae4cdfc1f1b4d59708a320d947230cd5287c6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 2.6Fixed in: openshift-service-mesh/kiali-ossmc-rhel8:sha256:ecd14b0b642cfcac1030a22e2f57a05ae0fd2d63a1f41c975487f30e34fef5d8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 2.6Fixed in: openshift-service-mesh/kiali-rhel8:sha256:add09864ea186e10cbf36efa26c5e2be626c6e2a47726379d209e5a6cc5698fe
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:e00f3b28e62c2ac90d836d7673183b1b391b76ce1b272861e49571f345cfa6a4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-rhel9:sha256:9ab887b31e9d45ef89acd26b0d2bd9aeb5fc7c87d0f296d605ed9fa5d8c6a50e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:928ed23934eae4e9c16ac23eaa828cc09f2d0ae539f330454ad6222e8cec3250
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-rhel9:sha256:00743a84647ebaac732100a5e224ec024d3dfa22a9a942b4df81d1042eac2493
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:8075a2d2d3d00efdce0280e00fa2724d339703a236ef7c74e546c4f0ce023d9b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-rhel9:sha256:2de7e4731db7bb2181168aba0de859a06ab1ae13ff8c7b175cde337541925c5d
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: nodejs:22/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: nodejs:24/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: nodejs22
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: nodejs:24/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: nodejs:20/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/nodejs-20
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/nodejs-20-minimal
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: nodejs:22/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: nodejs:20/nodejs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: nodejs24
redhatno patchvia redhat_api
Product: streams for Apache Kafka 3Fixed in: com.github.streamshub-console
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel8
redhatno patchvia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-1/kn-eventing-integrations-transform-jsonata-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-grafana-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 7Fixed in: rhceph/grafana-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 8Fixed in: rhceph/grafana-rhel9
redhatno patchvia redhat_api
Product: Red Hat Ceph Storage 9Fixed in: rhceph/grafana-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/gcc-toolset-13-toolchain
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/gcc-toolset-14-toolchain
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/go-toolset
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/perl-526
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/php-74
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/php-82
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/python-311
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/python-312
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/python-36
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/python-39
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/ruby-25
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/ruby-33
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: rhel8/s2i-base
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/go-toolset
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/nodejs-20
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/nodejs-20-minimal
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/perl-526
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/php-74
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/php-82
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/python-311
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/python-312
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/python-36
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/python-39
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/ruby-25
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/ruby-33
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: ubi8/s2i-base
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/udi-rhel9
redhatno patchvia redhat_api
Product: Red Hat Quay 3Fixed in: quay/quay-rhel8
redhatno patchvia redhat_api
Product: streams for Apache Kafka 2Fixed in: com.github.streamshub-console
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/gcc-toolset-13-toolchain
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/gcc-toolset-14-toolchain
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/go-toolset
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/nodejs-20
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/nodejs-20-minimal
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/perl-532
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/php-80
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/php-82
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/php-83
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/python-311
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/python-312
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/python-39
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/ruby-30
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/ruby-33
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rhel9/s2i-base
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/go-toolset
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/nodejs-20
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/nodejs-20-minimal
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/perl-532
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/php-80
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/php-82
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/php-83
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/python-311
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/python-312
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/python-39
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/ruby-30
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/ruby-33
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ubi9/s2i-base
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/bootc-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/disk-image-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-dashboard-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/mcg-core-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces-tech-preview/jetbrains-ide-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-curator5-rhel9

Vendor Advisories (2)

npmGHSA-5j98-mcp5-4vw2high

glob CLI: Command injection via -c/--cmd executes matches with shell:true

Nov 17, 2025
redhatCVE-2025-64756Important

glob: glob: Command Injection Vulnerability via Malicious Filenames

Nov 17, 2025

References

github.com / isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f
Patch
github.com / isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146
Patch
github.com / isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2
ExploitVendor Advisory