Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680629 advisory. @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee tha...

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680628)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680628 advisory. @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee tha...

The vulnerability of the NPM package manager’s library `@npmcli/arborist` allows a attacker to re-record files by manipulating symbolic links.

The vulnerability of the NPM package manager’s library @npmcli/arborist is related to errors that occur when running the npm install --ignore-scripts command. Exploiting this vulnerability could allow an attacker to re-register files by manipulating symbolic links...

ALPINE-CVE-2021-39134

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...

DEBIAN-CVE-2021-39135

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...

UBUNTU-CVE-2021-39134

@npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected folder...

NPM arborist 后置链接漏洞

NPM arborist is a software package from the American company npm NPM. It is used to visualize hierarchical data stored as flat lists. A backlink vulnerability exists in arborist that allows an attacker to perform arbitrary file creation, arbitrary file overwriting, and arbitrary code execution...