VYPR

fallow

by Fallow Rs

CVEs (1)

  • CVE-2026-115569LowOct 23, 2026
    risk 0.14cvss 3.3epss —

    Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-controlled Jest projects paths outside the project root through absolute paths, parent segments, dot-prefixed wildcard globs, or symlinks. In version 3.33.1,…