Gulpjs vulnerabilities
3 vulnerabilities
Known vulnerabilities in Gulpjs products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Glob Parent2 vulnerabilities
- Copy Props1 vulnerabilities
PrioritiseCVE-2021-35065gulpjs · glob-parent +3 moregulpjs glob-parentThe glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.CVSS7.5HighEPSS1.70%RoutineCVE-2020-28469gulpjs · glob-parent +3 moreRegular Expression Denial of Service (ReDoS)This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.CVSS7.5HighEPSS4.58%PrioritiseCVE-2020-28503gulpjs · copy-props +1 morePrototype PollutionThe package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.CVSS9.8CriticalEPSS1.70%