Skip to content
OpenAdvisories

Package · npm

@npmcli/arborist

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2021-39135

    UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

    `@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will alw…

    npm arborist nodejs npm Debian Ubuntu Alpine npm
  • High 8.2
    CVE-2021-39134

    UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

    `@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will a…

    npm arborist nodejs npm Debian Ubuntu Alpine npm