← Back

Gulpjs

gulpjs

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Glob Parent
glob-parent
Copy Props
copy-props

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gulpjs
1Glob Parent
Jun 17, 2026
Dec 26, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.
2Gulpjs
Oracle
2Communications Cloud Native Core Policy
Glob Parent
Jun 17, 2026
Jun 3, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
1Gulpjs
1Copy Props
Jun 17, 2026
Mar 23, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.