Weaponized file name flaw makes updating glob an urgent job