VULNRABLE / Vulnerability / GHSA-h4fr-cmh5-qr62
GHSA-h4fr-cmh5-qr62
LOW LOW fallow GHSA
Exploit verdict: No active-exploit signal
CVSS Score
2
Severity
LOW
EPSS
—
Source
GHSA
Summary
Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
What this means
GHSA-h4fr-cmh5-qr62 is a low-severity vulnerability affecting fallow, rated CVSS 2. Published October 23, 2026.
View full advisory at GHSA →