[ Vendor · 2 CVEs ]
isaacs
CVEs affecting isaacs published in the last 30 days, plus any isaacs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-118773 | 29 Oct 2026 | CVSS 6.3 | Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversalGlob matches files using patterns the shell uses. From 9.0.0 until 14.0.2, abort branches in src/walker.ts, including GlobUtil.walkCB()… | Fix |
| CVE-2026-118764 | 29 Oct 2026 | CVSS 6.9 | minimatch has potential denial of service via globparts amplificationminimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and prior to 11.0.1… | Fix |