npm vulnerabilities (Alpine)

4 vulnerabilities.

• npm Alpine glob CLI: Command injection via -c/--cmd executes matches with shell:true CVE-2025-64756 Fix available 7.5 HighNovember 17, 2025
• npm Alpine juliangruber brace-expansion index.js expand redos CVE-2025-5889 Fix available 2.3 LowJune 9, 2025
• npm Alpine Regular Expression Denial of Service (ReDoS) in cross-spawn CVE-2024-21538 Fix available 8.7 HighNovember 8, 2024
• npm Alpine The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if... CVE-2021-43616 Public exploitFix availableDisputed 9.0 CriticalNovember 13, 2021