Skip to content
OpenAdvisories

Package · npm

harp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2019-5437

    Unauthorized File Access in harp

    Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied to our knowledge.

    harp npm
  • Medium 5.3
    CVE-2019-5438

    Unauthorized File Access in harp

    Path traversal using symlink in npm harp module versions <= 0.29.0.

    harp npm