https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-35065.htmlhttps://patchthecve.com/cve/CVE-2021-35065.htmlWed, 17 Jun 2026 03:57:04 +0000HIGH 7.5: The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular expression.https://patchthecve.com/cve/CVE-2020-28469.htmlhttps://patchthecve.com/cve/CVE-2020-28469.htmlWed, 17 Jun 2026 03:10:30 +0000MEDIUM 5.3: This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.https://patchthecve.com/cve/CVE-2020-28503.htmlhttps://patchthecve.com/cve/CVE-2020-28503.htmlWed, 17 Jun 2026 03:10:33 +0000HIGH 7.3: The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.