This is a backport for version10.x - looking at the recent releases it looks like older versions aren't updated? I'm not sure how the maintainers want to proceed? Imo there's value in creating a maintenance branch/release on version 10.

Version10.4.9 is still massively popular as I can see on npm:https://www.npmjs.com/package/@nestjs/cli?activeTab=versions

@kamilmysliwiec I guess there are no plans to maintain previous major versions? If so, feel free to close this

We are also using version 10.x and would like to receive a remediated/patched version 10.X to address this CVE.

in the meantime, you can override glob on this dependency only in your package.json

npm

"overrides": {    "@nestjs/cli": {      "glob": "^10.5.0"    }  },

yarn:

"resolutions": {    "@nestjs/cli/glob": "^10.5.0"  },