Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-5438

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6fmm-47qc-p4m4

Unauthorized File Access in harp All versions of `harp` are vulnerable to Unauthorized File Access. If a symlink in the project's base directory points to a file outside of the directory, the file is served. This could allow an attacker to access sensitive files on the server. ## Recommendation No fix is currently available. Consider using an alternative module until a fix is made available.

gitlab/npm/harp/CVE-2019-5438

Path traversal using symlink in npm harp module.