EUVD-2019-0496

Malware in sbrugna...

Path traversal

Path traversal using symlink in npm harp module versions = 0.29.0...

CVE-2019-5438

Path traversal using symlink in npm harp module versions = 0.29.0...

Information disclosure

Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are = 0.29.0 and no fix was applied to our knowledge...

CVE-2019-5437

Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are = 0.29.0 and no fix was applied to our knowledge...

CVE-2019-5438

Path traversal using symlink in npm harp module versions = 0.29.0...

CVE-2019-5437

Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are = 0.29.0 and no fix was applied to our knowledge...

CVE-2019-5437

Summary: The CVE concerns the npm module harp (Node.js web server). Affected versions are

CVE-2019-5438

Summary: The CVE-2019-5438 issue affects the npm package harp, specifically versions ≤ 0.29.0, where an attacker can exploit a symlink-based path traversal to access files outside the project directory. This vulnerability allows serving sensitive files via the harp server when a symlink points to...

CVE-2019-5438

Path traversal using symlink in npm harp module versions = 0.29.0...

Node.js third-party modules: [harp] Path traversal using symlink

In reference to 453820 Module module name: harp version: 0.29.0 npm page: https://www.npmjs.com/package/harp Module Description zero-configuration web server with built in pre-processing Module Stats 2,679 downloads in the last week Vulnerability Path traversal using symlink. Vulnerability...

Node.js third-party modules: [harp] Unsafe rendering of Markdown files

I would like to report Cross Site Scripting vulnerablity in harp module It allows to execute arbitrary JavaScript due to unsafe rendering of markdown files. Similar to 404126 Module module name: harp version: 0.29.0 npm page: https://www.npmjs.com/package/harp Module Description zero-configuratio...