Skip to content
OpenAdvisories

Product · Microsoft

apm

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-46383

    Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`

    Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install <bundle> on supported Python 3.10…

    Microsoft apm apm-cli PyPI