/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-657q-jgmc-rv4j

Published

Last updated

https://images.chainguard.dev/security/CGA-657q-jgmc-rv4j
Package

npm-10.8.2

Repository

Chainguard

Latest Update
Not affected
Aliases
  • CVE-2025-64756
  • GHSA-5j98-mcp5-4vw2

Severity

7.5

High

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-64756
  • https://github.com/advisories/GHSA-5j98-mcp5-4vw2

Updates

Status

Not affected

Justification

Vulnerable code not in execute path

Impact

This CVE affects only the glob CLI and does not affect the javascript API.

Status

Under investigation

The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSGolden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsChainguard CoursesDocumentationTrust Center

Company

About UsBlogPartnersNewsroomCareersLegal