Description
Path traversal using symlink in npm harp module versions <= 0.29.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | harp | Not fixed | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | harp | < 0.40.3 | 0.40.3 | GHSA-6fmm-47qc-p4m4 |
Medium · 5.3
CVE-2019-5438
EUVD-2019-0510GHSA-6fmm-47qc-p4m4
Unauthorized File Access in harp
Published May 10, 2019 · Updated Aug 4, 2024 · Assigned by hackerone