This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.
{ "affected_functions": [ "(glob-parent).globParent" ] }