Tag

cve-2025-64756

Safeguard articles tagged "cve-2025-64756" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

The glob npm Package and CVE-2025-64756: What Happened and How to Fix It

In November 2025 a command-injection flaw in the glob npm CLI lit up scanners across the Node ecosystem. Here is what CVE-2025-64756 actually affects and how to remediate it.

Nov 28, 20256 min read