A vulnerability in glob versions 9.0.0 through 14.0.1 allows asynchronous directory traversal operations to continue consuming CPU and filesystem I/O after an abort signal or timeout has been triggered. This occurs because abort branches in the code call callbacks without returning, causing continued recursive directory reads even after cancellation. The issue impacts availability by allowing excessive resource consumption, potentially degrading service performance. The flaw is fixed in glob version 14.0.2.