CGA-x25h-q95g-gvr3

The vulnerable glob package is included as a transitive dependency of Node.js through npm. The upstream npm maintainers plan to release a fix shortly.[1] [1] https://github.com/npm/cli/issues/8741