[GHSA-5j98-mcp5-4vw2] glob@10.4.5: Command injection via -c/--cmd

[nthmost-orkes]

Vulnerability Report

CVE	Library	Installed	Fixed
GHSA-5j98-mcp5-4vw2	glob	10.4.5	10.5.0

Summary

glob CLI: Command injection via -c/--cmd executes matches with shell:true.

References

• GHSA-5j98-mcp5-4vw2

[nthmost-orkes]

Fix PR: #115