MINI-Q64W-WP5Q-GMW6

Bulletin has no description...

GHSA-GMW6-94GG-2RC2

creationtimestamp| type| source ---|---|--- 2021-08-31 20:33:48+00:00| seen| https://t.me/cibsecurity/28112...

CVE-2021-39135

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...

CVE-2021-39135

CVE-2021-39135 affects the Node.js npm arborist module, which builds dependency trees and writes into node_modules. The issue arises if the root project’s node_modules folder (or a dependency’s) is replaced with a symbolic link, allowing a local attacker to write package dependencies to an arbitr...