NPM Audit, Severity: High. Glob package in Tailwind v3

[ashleyyy94]

Hi team,

GHSA-5j98-mcp5-4vw2. Glob package used in Tailwind v3 has a CVE reported with high severity, as shown below:

glob  10.3.7 - 11.0.3
Severity: high
glob CLI: Command injection via -c/--cmd executes matches with shell:true - https://github.com/advisories/GHSA-5j98-mcp5-4vw2
fix available via `npm audit fix --force`
Will install tailwindcss@4.1.17, which is a breaking change
node_modules/sucrase/node_modules/glob
  sucrase  >=3.35.0
  Depends on vulnerable versions of glob
  node_modules/sucrase
    tailwindcss  3.4.15 - 3.4.18
    Depends on vulnerable versions of sucrase
    node_modules/tailwindcss

Requesting for a release for v3 with the package updated, thank you!

[nullaf]

I'd really appreciate this change too

[tordans]

See also #19327 (comment)