1 matches found
Packing does not respect root-level ignore files in workspaces
Impact npm pack ignores root-level .gitignore & .npmignore file exclusion directives when run in a workspace or with a workspace flag ie. --workspaces, --workspace=. Anyone who has run npm pack or npm publish with workspaces, as of v7.9.0 & v7.13.0 respectively, may be affected and have published...
7.5CVSS8.4AI score0.03465EPSS
SaveExploits0References12Affected Software1
20