1 matches found
GHSA-HJ9C-8JMM-8C52 Packing does not respect root-level ignore files in workspaces
Impact npm pack ignores root-level .gitignore & .npmignore file exclusion directives when run in a workspace or with a workspace flag ie. --workspaces, --workspace=. Anyone who has run npm pack or npm publish with workspaces, as of v7.9.0 & v7.13.0 respectively, may be affected and have published...
7.5CVSS8AI score0.03909EPSS
SaveExploits0References12
20