Skip to content
OpenAdvisories

Package · npm

@humanfs/node

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-p498-v437-472g

    humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

    ### Summary `@humanfs/node` does not treat symlinks as a separate case during copy operations. A symlink placed inside an attacker-controlled source tree can make `copyAll()` read and copy the contents of any file readable by the process, even when that file …

    @humanfs/node npm