CVE-2019-5437

Summary: The CVE concerns the npm module harp (Node.js web server). Affected versions are

CVE-2019-5438

Summary: The CVE-2019-5438 issue affects the npm package harp, specifically versions ≤ 0.29.0, where an attacker can exploit a symlink-based path traversal to access files outside the project directory. This vulnerability allows serving sensitive files via the harp server when a symlink points to...