npm vulnerabilities (BellSoft Hardened Containers)

2 vulnerabilities.

• npm BellSoft Hardened Containers glob CLI: Command injection via -c/--cmd executes matches with shell:true CVE-2025-64756 Fix available 7.5 HighNovember 17, 2025
• npm BellSoft Hardened Containers Regular Expression Denial of Service (ReDoS) in cross-spawn CVE-2024-21538 Fix available 8.7 HighNovember 8, 2024