Every CVE Search/ Get API key

CVE-2021-35065

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

7.5 HighFix available

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.70%Up 0.8 points since Dec 26, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Record
CVE-2021-35065
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
CVE List 7.5

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Record
CVE-2021-35065
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
EUVDEUVD-2022-6318 7.5

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Record
EUVD-2022-6318
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-cj88-88mr-972w 7.5

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service (ReDoS). This issue is fixed in version 6.0.1.

This vulnerability is separate from GHSA-ww39-953v-wcq6.

Record
GHSA-cj88-88mr-972w
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-1333
Updated
2026-11-02
OSV 7.5

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Record
CVE-2021-35065
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-35065 7.5

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Record
DEBIAN-CVE-2021-35065
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 22 moreShow less
OSVGHSA-cj88-88mr-972w 7.5

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service (ReDoS). This issue is fixed in version 6.0.1.

This vulnerability is separate from GHSA-ww39-953v-wcq6.

Record
GHSA-cj88-88mr-972w
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333, CWE-400
Updated
2026-11-02
OSVRHSA-2023:0612 7.5

Red Hat Security Advisory: rh-nodejs14-nodejs and rh-nodejs14-nodejs-nodemon security update

Record
RHSA-2023:0612
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:1043 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

Record
RHSA-2023:1043
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1044 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

Record
RHSA-2023:1044
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1045 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9

Record
RHSA-2023:1045
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1533 8.6

Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update

Record
RHSA-2023:1533
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:1582 8.6

Red Hat Security Advisory: nodejs:16 security, bug fix, and enhancement update

Record
RHSA-2023:1582
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:1583 7.5

Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update

Record
RHSA-2023:1583
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:1742 8.6

Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update

Record
RHSA-2023:1742
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:1743 8.6

Red Hat Security Advisory: nodejs:14 security, bug fix, and enhancement update

Record
RHSA-2023:1743
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:2654 8.6

Red Hat Security Advisory: nodejs:18 security, bug fix, and enhancement update

Record
RHSA-2023:2654
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:2655 8.6

Red Hat Security Advisory: nodejs and nodejs-nodemon security, bug fix, and enhancement update

Record
RHSA-2023:2655
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRLSA-2023:2654 8.6

Moderate: nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (18.14.2).

Security Fix(es):

  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)

  • c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)

  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)

  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)

  • Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)

  • Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)

  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)

  • Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:2654
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-35065 7.5

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Record
UBUNTU-CVE-2021-35065
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:1582 No score

Moderate: nodejs:16 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (16.19.1).

Security Fix(es):

  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
  • c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
  • Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)
  • Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)
  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
  • Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:1582
Updated
2026-11-02
OSVALSA-2023:1583 No score

Moderate: nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (18.14.2).

Security Fix(es):

  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
  • Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)
  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
  • Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:1583
Updated
2026-11-02
OSVALSA-2023:1743 No score

Important: nodejs:14 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (14.21.3).

Security Fix(es):

  • decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)
  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
  • nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)
  • c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:1743
Updated
2026-11-02
OSVALSA-2023:2654 No score

Moderate: nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (18.14.2).

Security Fix(es):

  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)
  • c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)
  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)
  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)
  • Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)
  • Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)
  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)
  • Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:2654
Updated
2026-11-02
OSVBIT-gulp-2021-35065 No score

The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.

Record
BIT-gulp-2021-35065
Updated
2026-11-02
OSVRLSA-2023:1582 No score

Moderate: nodejs:16 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (16.19.1).

Security Fix(es):

  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)

  • c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)

  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)

  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)

  • Node.js: OpenSSL error handling issues in nodejs crypto library (CVE-2023-23919)

  • Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)

  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)

  • Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:1582
Updated
2026-11-02
OSVRLSA-2023:1583 No score

Moderate: nodejs:18 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (18.14.2).

Security Fix(es):

  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)

  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)

  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)

  • Node.js: Fetch API did not protect against CRLF injection in host headers (CVE-2023-23936)

  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)

  • Node.js: Regular Expression Denial of Service in Headers fetch API (CVE-2023-24807)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:1583
Updated
2026-11-02
OSVRLSA-2023:1743 No score

Important: nodejs:14 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.

The following packages have been upgraded to a later upstream version: nodejs (14.21.3).

Security Fix(es):

  • decode-uri-component: improper input validation resulting in DoS (CVE-2022-38900)

  • glob-parent: Regular Expression Denial of Service (CVE-2021-35065)

  • nodejs-minimatch: ReDoS via the braceExpand function (CVE-2022-3517)

  • c-ares: buffer overflow in config_sortlist() due to missing string length check (CVE-2022-4904)

  • http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2022-25881)

  • Node.js: Permissions policies can be bypassed via process.mainModule (CVE-2023-23918)

  • Node.js: insecure loading of ICU data through ICU_DATA environment variable (CVE-2023-23920)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:1743
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glob-parent
npm
 6.0.0 to 6.0.0
6.0.1
nodejs
AlmaLinux:8
 before 1:16.19.1-1.module_el8.7.0+3496+a59a3324
1:16.19.1-1.module_el8.7.0+3496+a59a3324
nodejs-devel
AlmaLinux:8
 before 1:16.19.1-1.module_el8.7.0+3496+a59a3324
1:16.19.1-1.module_el8.7.0+3496+a59a3324
nodejs-docs
AlmaLinux:8
 before 1:16.19.1-1.module_el8.7.0+3496+a59a3324
1:16.19.1-1.module_el8.7.0+3496+a59a3324
nodejs-full-i18n
AlmaLinux:8
 before 1:16.19.1-1.module_el8.7.0+3496+a59a3324
1:16.19.1-1.module_el8.7.0+3496+a59a3324
nodejs-nodemon
AlmaLinux:8
 before 2.0.20-3.module_el8.7.0+3496+a59a3324
2.0.20-3.module_el8.7.0+3496+a59a3324
nodejs-packaging
AlmaLinux:8
 before 25-1.module_el8.5.0+2605+45d748af
25-1.module_el8.5.0+2605+45d748af
npm
AlmaLinux:8
 before 1:8.19.3-1.16.19.1.1.module_el8.7.0+3496+a59a3324
1:8.19.3-1.16.19.1.1.module_el8.7.0+3496+a59a3324
nodejs
AlmaLinux:8
 before 1:18.14.2-2.module_el8.7.0+3497+c65299e7
1:18.14.2-2.module_el8.7.0+3497+c65299e7
nodejs-devel
AlmaLinux:8
 before 1:18.14.2-2.module_el8.7.0+3497+c65299e7
1:18.14.2-2.module_el8.7.0+3497+c65299e7
Show 118 moreShow less
Affected packages
PackageAffectedFixed
nodejs-docs
AlmaLinux:8
 before 1:18.14.2-2.module_el8.7.0+3497+c65299e7
1:18.14.2-2.module_el8.7.0+3497+c65299e7
nodejs-full-i18n
AlmaLinux:8
 before 1:18.14.2-2.module_el8.7.0+3497+c65299e7
1:18.14.2-2.module_el8.7.0+3497+c65299e7
nodejs-nodemon
AlmaLinux:8
 before 2.0.20-2.module_el8.7.0+3497+c65299e7
2.0.20-2.module_el8.7.0+3497+c65299e7
nodejs-packaging
AlmaLinux:8
 before 2021.06-4.module_el8.7.0+3343+ea2b7901
2021.06-4.module_el8.7.0+3343+ea2b7901
nodejs-packaging-bundler
AlmaLinux:8
 before 2021.06-4.module_el8.7.0+3343+ea2b7901
2021.06-4.module_el8.7.0+3343+ea2b7901
npm
AlmaLinux:8
 before 1:9.5.0-1.18.14.2.2.module_el8.7.0+3497+c65299e7
1:9.5.0-1.18.14.2.2.module_el8.7.0+3497+c65299e7
nodejs
AlmaLinux:8
 before 1:14.21.3-1.module_el8.7.0+3551+53700ee8
1:14.21.3-1.module_el8.7.0+3551+53700ee8
nodejs-devel
AlmaLinux:8
 before 1:14.21.3-1.module_el8.7.0+3551+53700ee8
1:14.21.3-1.module_el8.7.0+3551+53700ee8
nodejs-docs
AlmaLinux:8
 before 1:14.21.3-1.module_el8.7.0+3551+53700ee8
1:14.21.3-1.module_el8.7.0+3551+53700ee8
nodejs-full-i18n
AlmaLinux:8
 before 1:14.21.3-1.module_el8.7.0+3551+53700ee8
1:14.21.3-1.module_el8.7.0+3551+53700ee8
nodejs-nodemon
AlmaLinux:8
 before 2.0.20-3.module_el8.7.0+3551+53700ee8
2.0.20-3.module_el8.7.0+3551+53700ee8
nodejs-packaging
AlmaLinux:8
 before 23-3.module_el8.4.0+2522+3bd42762
23-3.module_el8.4.0+2522+3bd42762
npm
AlmaLinux:8
 before 1:6.14.18-1.14.21.3.1.module_el8.7.0+3551+53700ee8
1:6.14.18-1.14.21.3.1.module_el8.7.0+3551+53700ee8
nodejs
AlmaLinux:9
 before 1:18.14.2-2.module_el9.2.0+29+de583a0b
1:18.14.2-2.module_el9.2.0+29+de583a0b
nodejs-devel
AlmaLinux:9
 before 1:18.14.2-2.module_el9.2.0+29+de583a0b
1:18.14.2-2.module_el9.2.0+29+de583a0b
nodejs-docs
AlmaLinux:9
 before 1:18.14.2-2.module_el9.2.0+29+de583a0b
1:18.14.2-2.module_el9.2.0+29+de583a0b
nodejs-full-i18n
AlmaLinux:9
 before 1:18.14.2-2.module_el9.2.0+29+de583a0b
1:18.14.2-2.module_el9.2.0+29+de583a0b
nodejs-nodemon
AlmaLinux:9
 before 2.0.20-2.module_el9.2.0+29+de583a0b
2.0.20-2.module_el9.2.0+29+de583a0b
nodejs-packaging
AlmaLinux:9
 before 2021.06-4.module_el9.1.0+13+d9a595ea
2021.06-4.module_el9.1.0+13+d9a595ea
nodejs-packaging-bundler
AlmaLinux:9
 before 2021.06-4.module_el9.1.0+13+d9a595ea
2021.06-4.module_el9.1.0+13+d9a595ea
npm
AlmaLinux:9
 before 1:9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b
1:9.5.0-1.18.14.2.2.module_el9.2.0+29+de583a0b
gulp
Bitnami
 6.0.0 up to 6.0.1
6.0.1
node-glob-parent
Debian:12
 before 6.0.2+~5.1.1-1
6.0.2+~5.1.1-1
node-glob-parent
Debian:13
 before 6.0.2+~5.1.1-1
6.0.2+~5.1.1-1
node-glob-parent
Debian:14
 before 6.0.2+~5.1.1-1
6.0.2+~5.1.1-1
glob-parent
npm
 6.0.0 up to 6.0.1
6.0.1
rh-nodejs14-nodejs
Red Hat:rhel_software_collections:3::el7
 before 0:14.21.1-3.el7
0:14.21.1-3.el7
rh-nodejs14-nodejs-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:14.21.1-3.el7
0:14.21.1-3.el7
rh-nodejs14-nodejs-devel
Red Hat:rhel_software_collections:3::el7
 before 0:14.21.1-3.el7
0:14.21.1-3.el7
rh-nodejs14-nodejs-docs
Red Hat:rhel_software_collections:3::el7
 before 0:14.21.1-3.el7
0:14.21.1-3.el7
rh-nodejs14-nodejs-full-i18n
Red Hat:rhel_software_collections:3::el7
 before 0:14.21.1-3.el7
0:14.21.1-3.el7
rh-nodejs14-nodejs-nodemon
Red Hat:rhel_software_collections:3::el7
 before 0:2.0.20-2.el7
0:2.0.20-2.el7
rh-nodejs14-npm
Red Hat:rhel_software_collections:3::el7
 before 0:6.14.17-14.21.1.3.el7
0:6.14.17-14.21.1.3.el7
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el7
 before 0:18.0.6-1.redhat_00001.1.el7sso
0:18.0.6-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el7
 before 0:18.0.6-1.redhat_00001.1.el7sso
0:18.0.6-1.redhat_00001.1.el7sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el8
 before 0:18.0.6-1.redhat_00001.1.el8sso
0:18.0.6-1.redhat_00001.1.el8sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el8
 before 0:18.0.6-1.redhat_00001.1.el8sso
0:18.0.6-1.redhat_00001.1.el8sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el9
 before 0:18.0.6-1.redhat_00001.1.el9sso
0:18.0.6-1.redhat_00001.1.el9sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el9
 before 0:18.0.6-1.redhat_00001.1.el9sso
0:18.0.6-1.redhat_00001.1.el9sso
nodejs
Red Hat:rhel_eus:8.4::appstream
 before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16
1:14.21.3-1.module+el8.4.0+18317+43f5ac16
nodejs-debuginfo
Red Hat:rhel_eus:8.4::appstream
 before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16
1:14.21.3-1.module+el8.4.0+18317+43f5ac16
nodejs-debugsource
Red Hat:rhel_eus:8.4::appstream
 before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16
1:14.21.3-1.module+el8.4.0+18317+43f5ac16
nodejs-devel
Red Hat:rhel_eus:8.4::appstream
 before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16
1:14.21.3-1.module+el8.4.0+18317+43f5ac16
nodejs-docs
Red Hat:rhel_eus:8.4::appstream
 before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16
1:14.21.3-1.module+el8.4.0+18317+43f5ac16
nodejs-full-i18n
Red Hat:rhel_eus:8.4::appstream
 before 1:14.21.3-1.module+el8.4.0+18317+43f5ac16
1:14.21.3-1.module+el8.4.0+18317+43f5ac16
nodejs-nodemon
Red Hat:rhel_eus:8.4::appstream
 before 0:2.0.20-3.module+el8.4.0+18317+43f5ac16
0:2.0.20-3.module+el8.4.0+18317+43f5ac16
nodejs-packaging
Red Hat:rhel_eus:8.4::appstream
 before 0:23-3.module+el8.3.0+6519+9f98ed83
0:23-3.module+el8.3.0+6519+9f98ed83
npm
Red Hat:rhel_eus:8.4::appstream
 before 1:6.14.18-1.14.21.3.1.module+el8.4.0+18317+43f5ac16
1:6.14.18-1.14.21.3.1.module+el8.4.0+18317+43f5ac16
nodejs
Red Hat:enterprise_linux:8::appstream
 before 1:16.19.1-1.module+el8.7.0+18373+704f5cef
1:16.19.1-1.module+el8.7.0+18373+704f5cef
nodejs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:16.19.1-1.module+el8.7.0+18373+704f5cef
1:16.19.1-1.module+el8.7.0+18373+704f5cef
nodejs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:16.19.1-1.module+el8.7.0+18373+704f5cef
1:16.19.1-1.module+el8.7.0+18373+704f5cef
nodejs-devel
Red Hat:enterprise_linux:8::appstream
 before 1:16.19.1-1.module+el8.7.0+18373+704f5cef
1:16.19.1-1.module+el8.7.0+18373+704f5cef
nodejs-docs
Red Hat:enterprise_linux:8::appstream
 before 1:16.19.1-1.module+el8.7.0+18373+704f5cef
1:16.19.1-1.module+el8.7.0+18373+704f5cef
nodejs-full-i18n
Red Hat:enterprise_linux:8::appstream
 before 1:16.19.1-1.module+el8.7.0+18373+704f5cef
1:16.19.1-1.module+el8.7.0+18373+704f5cef
nodejs-nodemon
Red Hat:enterprise_linux:8::appstream
 before 0:2.0.20-3.module+el8.7.0+18373+704f5cef
0:2.0.20-3.module+el8.7.0+18373+704f5cef
nodejs-packaging
Red Hat:enterprise_linux:8::appstream
 before 0:25-1.module+el8.5.0+10992+fac5fe06
0:25-1.module+el8.5.0+10992+fac5fe06
npm
Red Hat:enterprise_linux:8::appstream
 before 1:8.19.3-1.16.19.1.1.module+el8.7.0+18373+704f5cef
1:8.19.3-1.16.19.1.1.module+el8.7.0+18373+704f5cef
nodejs
Red Hat:enterprise_linux:8::appstream
 before 1:18.14.2-2.module+el8.7.0+18445+9493b6ea
1:18.14.2-2.module+el8.7.0+18445+9493b6ea
nodejs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:18.14.2-2.module+el8.7.0+18445+9493b6ea
1:18.14.2-2.module+el8.7.0+18445+9493b6ea
nodejs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:18.14.2-2.module+el8.7.0+18445+9493b6ea
1:18.14.2-2.module+el8.7.0+18445+9493b6ea
nodejs-devel
Red Hat:enterprise_linux:8::appstream
 before 1:18.14.2-2.module+el8.7.0+18445+9493b6ea
1:18.14.2-2.module+el8.7.0+18445+9493b6ea
nodejs-docs
Red Hat:enterprise_linux:8::appstream
 before 1:18.14.2-2.module+el8.7.0+18445+9493b6ea
1:18.14.2-2.module+el8.7.0+18445+9493b6ea
nodejs-full-i18n
Red Hat:enterprise_linux:8::appstream
 before 1:18.14.2-2.module+el8.7.0+18445+9493b6ea
1:18.14.2-2.module+el8.7.0+18445+9493b6ea
nodejs-nodemon
Red Hat:enterprise_linux:8::appstream
 before 0:2.0.20-2.module+el8.7.0+18445+9493b6ea
0:2.0.20-2.module+el8.7.0+18445+9493b6ea
nodejs-packaging
Red Hat:enterprise_linux:8::appstream
 before 0:2021.06-4.module+el8.7.0+15582+19c314fa
0:2021.06-4.module+el8.7.0+15582+19c314fa
nodejs-packaging-bundler
Red Hat:enterprise_linux:8::appstream
 before 0:2021.06-4.module+el8.7.0+15582+19c314fa
0:2021.06-4.module+el8.7.0+15582+19c314fa
npm
Red Hat:enterprise_linux:8::appstream
 before 1:9.5.0-1.18.14.2.2.module+el8.7.0+18445+9493b6ea
1:9.5.0-1.18.14.2.2.module+el8.7.0+18445+9493b6ea
nodejs
Red Hat:rhel_eus:8.6::appstream
 before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646
1:14.21.3-1.module+el8.6.0+18532+cbe6f646
nodejs-debuginfo
Red Hat:rhel_eus:8.6::appstream
 before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646
1:14.21.3-1.module+el8.6.0+18532+cbe6f646
nodejs-debugsource
Red Hat:rhel_eus:8.6::appstream
 before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646
1:14.21.3-1.module+el8.6.0+18532+cbe6f646
nodejs-devel
Red Hat:rhel_eus:8.6::appstream
 before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646
1:14.21.3-1.module+el8.6.0+18532+cbe6f646
nodejs-docs
Red Hat:rhel_eus:8.6::appstream
 before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646
1:14.21.3-1.module+el8.6.0+18532+cbe6f646
nodejs-full-i18n
Red Hat:rhel_eus:8.6::appstream
 before 1:14.21.3-1.module+el8.6.0+18532+cbe6f646
1:14.21.3-1.module+el8.6.0+18532+cbe6f646
nodejs-nodemon
Red Hat:rhel_eus:8.6::appstream
 before 0:2.0.20-3.module+el8.6.0+18532+cbe6f646
0:2.0.20-3.module+el8.6.0+18532+cbe6f646
nodejs-packaging
Red Hat:rhel_eus:8.6::appstream
 before 0:23-3.module+el8.3.0+6519+9f98ed83
0:23-3.module+el8.3.0+6519+9f98ed83
npm
Red Hat:rhel_eus:8.6::appstream
 before 1:6.14.18-1.14.21.3.1.module+el8.6.0+18532+cbe6f646
1:6.14.18-1.14.21.3.1.module+el8.6.0+18532+cbe6f646
nodejs
Red Hat:enterprise_linux:8::appstream
 before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6
1:14.21.3-1.module+el8.7.0+18531+81d21ca6
nodejs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6
1:14.21.3-1.module+el8.7.0+18531+81d21ca6
nodejs-debugsource
Red Hat:enterprise_linux:8::appstream
 before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6
1:14.21.3-1.module+el8.7.0+18531+81d21ca6
nodejs-devel
Red Hat:enterprise_linux:8::appstream
 before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6
1:14.21.3-1.module+el8.7.0+18531+81d21ca6
nodejs-docs
Red Hat:enterprise_linux:8::appstream
 before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6
1:14.21.3-1.module+el8.7.0+18531+81d21ca6
nodejs-full-i18n
Red Hat:enterprise_linux:8::appstream
 before 1:14.21.3-1.module+el8.7.0+18531+81d21ca6
1:14.21.3-1.module+el8.7.0+18531+81d21ca6
nodejs-nodemon
Red Hat:enterprise_linux:8::appstream
 before 0:2.0.20-3.module+el8.7.0+18531+81d21ca6
0:2.0.20-3.module+el8.7.0+18531+81d21ca6
nodejs-packaging
Red Hat:enterprise_linux:8::appstream
 before 0:23-3.module+el8.3.0+6519+9f98ed83
0:23-3.module+el8.3.0+6519+9f98ed83
npm
Red Hat:enterprise_linux:8::appstream
 before 1:6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6
1:6.14.18-1.14.21.3.1.module+el8.7.0+18531+81d21ca6
nodejs
Red Hat:enterprise_linux:9::appstream
 before 1:18.14.2-2.module+el9.2.0.z+18497+a402347c
1:18.14.2-2.module+el9.2.0.z+18497+a402347c
nodejs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:18.14.2-2.module+el9.2.0.z+18497+a402347c
1:18.14.2-2.module+el9.2.0.z+18497+a402347c
nodejs-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:18.14.2-2.module+el9.2.0.z+18497+a402347c
1:18.14.2-2.module+el9.2.0.z+18497+a402347c
nodejs-devel
Red Hat:enterprise_linux:9::appstream
 before 1:18.14.2-2.module+el9.2.0.z+18497+a402347c
1:18.14.2-2.module+el9.2.0.z+18497+a402347c
nodejs-docs
Red Hat:enterprise_linux:9::appstream
 before 1:18.14.2-2.module+el9.2.0.z+18497+a402347c
1:18.14.2-2.module+el9.2.0.z+18497+a402347c
nodejs-full-i18n
Red Hat:enterprise_linux:9::appstream
 before 1:18.14.2-2.module+el9.2.0.z+18497+a402347c
1:18.14.2-2.module+el9.2.0.z+18497+a402347c
nodejs-nodemon
Red Hat:enterprise_linux:9::appstream
 before 0:2.0.20-2.module+el9.2.0.z+18497+a402347c
0:2.0.20-2.module+el9.2.0.z+18497+a402347c
nodejs-packaging
Red Hat:enterprise_linux:9::appstream
 before 0:2021.06-4.module+el9.1.0+15718+e52ec601
0:2021.06-4.module+el9.1.0+15718+e52ec601
nodejs-packaging-bundler
Red Hat:enterprise_linux:9::appstream
 before 0:2021.06-4.module+el9.1.0+15718+e52ec601
0:2021.06-4.module+el9.1.0+15718+e52ec601
npm
Red Hat:enterprise_linux:9::appstream
 before 1:9.5.0-1.18.14.2.2.module+el9.2.0.z+18497+a402347c
1:9.5.0-1.18.14.2.2.module+el9.2.0.z+18497+a402347c
nodejs
Red Hat:enterprise_linux:9::appstream
 before 1:16.19.1-1.el9_2
1:16.19.1-1.el9_2
nodejs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:16.19.1-1.el9_2
1:16.19.1-1.el9_2
nodejs-debugsource
Red Hat:enterprise_linux:9::appstream
 before 1:16.19.1-1.el9_2
1:16.19.1-1.el9_2
nodejs-docs
Red Hat:enterprise_linux:9::appstream
 before 1:16.19.1-1.el9_2
1:16.19.1-1.el9_2
nodejs-full-i18n
Red Hat:enterprise_linux:9::appstream
 before 1:16.19.1-1.el9_2
1:16.19.1-1.el9_2
nodejs-libs
Red Hat:enterprise_linux:9::appstream
 before 1:16.19.1-1.el9_2
1:16.19.1-1.el9_2
nodejs-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 1:16.19.1-1.el9_2
1:16.19.1-1.el9_2
nodejs-nodemon
Red Hat:enterprise_linux:9::appstream
 before 0:2.0.20-3.el9_2
0:2.0.20-3.el9_2
npm
Red Hat:enterprise_linux:9::appstream
 before 1:8.19.3-1.16.19.1.1.el9_2
1:8.19.3-1.16.19.1.1.el9_2
nodejs
Rocky Linux:8
 before 1:16.19.1-1.module+el8.7.0+1178+d52dba78
1:16.19.1-1.module+el8.7.0+1178+d52dba78
nodejs-nodemon
Rocky Linux:8
 before 0:2.0.20-3.module+el8.7.0+1178+d52dba78
0:2.0.20-3.module+el8.7.0+1178+d52dba78
nodejs-packaging
Rocky Linux:8
 before 0:25-1.module+el8.6.0+1046+80feca58
0:25-1.module+el8.6.0+1046+80feca58
nodejs
Rocky Linux:8
 before 1:18.14.2-2.module+el8.7.0+1177+510ae886
1:18.14.2-2.module+el8.7.0+1177+510ae886
nodejs-nodemon
Rocky Linux:8
 before 0:2.0.20-2.module+el8.7.0+1108+49363b0d
0:2.0.20-2.module+el8.7.0+1108+49363b0d
nodejs-packaging
Rocky Linux:8
 before 0:2021.06-4.module+el8.7.0+1072+5b168780
0:2021.06-4.module+el8.7.0+1072+5b168780
nodejs
Rocky Linux:8
 before 1:14.21.3-1.module+el8.7.0+1183+c2c35f0a
1:14.21.3-1.module+el8.7.0+1183+c2c35f0a
nodejs-packaging
Rocky Linux:8
 before 0:23-3.module+el8.7.0+1071+4bdda2a8
0:23-3.module+el8.7.0+1071+4bdda2a8
nodejs-packaging
Rocky Linux:9
 before 0:2021.06-4.module+el9.7.0+40025+0e0cf6b2
0:2021.06-4.module+el9.7.0+40025+0e0cf6b2
nodejs-packaging
Rocky Linux:9
 before 0:2021.06-4.module+el9.7.0+40017+f0db1785
0:2021.06-4.module+el9.7.0+40017+f0db1785
nodejs-packaging
Rocky Linux:9
 before 0:2021.06-4.module+el9.7.0+40018+a011993d
0:2021.06-4.module+el9.7.0+40018+a011993d
nodejs-packaging
Rocky Linux:9
 before 0:2021.06-4.module+el9.7.0+40022+9ecc286c
0:2021.06-4.module+el9.7.0+40022+9ecc286c
node-glob-parent
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.0.1-1
 None known
node-glob-parent
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.1.0-1
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-35065 is a high vulnerability (CVSS 7.5) in Gulpjs Glob-parent, published July 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. Fixed in glob-parent 6.0.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 88 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open