Harp
by Harpjs
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-5438 | Med | 0.35 | 5.3 | 0.01 | May 10, 2019 | Path traversal using symlink in npm harp module versions <= 0.29.0. | ||
| CVE-2019-5437 | Med | 0.28 | 5.3 | 0.01 | May 10, 2019 | Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied to our knowledge. |
- risk 0.35cvss 5.3epss 0.01
Path traversal using symlink in npm harp module versions <= 0.29.0.
- risk 0.28cvss 5.3epss 0.01
Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied to our knowledge.