Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/08/31 4:03 p.m.38 views

UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

Impact Arbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and t...

8.2CVSS6.9AI score0.00553EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder