Advisory Weakness Curation

Unauthorized File Access in harp Affected versions of `harp` are vulnerable to Unauthorized File Access. The package states that it ignores files and directories with names that start with an underscore, such as `_secret-folder`. If the underscore character is URL encoded the server delivers the file. ## Recommendation Upgrade to version `0.40.2` or later.

Information Exposure Through Directory Listing Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.