EUVD-2025-197818Published
glob CLI: Command injection via -c/--cmd executes matches with shell:true
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-64756 · Microsoft / collected KEV context
cve-program · CVE-2025-64756
- https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2
- https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f
- https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146
euvd · EUVD-2025-197818
- https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2
- https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f
- https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146
nvd · CVE-2025-64756
- https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f
- https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146
- https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2
osv · GHSA-5j98-mcp5-4vw2
- https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2
- https://nvd.nist.gov/vuln/detail/CVE-2025-64756
- https://github.com/isaacs/node-glob/commit/1e4e297342a09f2aa0ced87fcd4a70ddc325d75f
- https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146
- https://github.com/isaacs/node-glob
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.