1 matches found
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Impact Arbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution @npmcli/arborist, the library that calculates dependency trees and manages the nodemodules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and t...
8.2CVSS6.9AI score0.00553EPSS
SaveExploits0References6Affected Software1
20