Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Harpjs Subscribe
Filtered by product Harp
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-5438 1 Harpjs 1 Harp 2020-10-16 5.0 MEDIUM 5.3 MEDIUM
Path traversal using symlink in npm harp module versions <= 0.29.0.
CVE-2019-5437 1 Harpjs 1 Harp 2019-10-09 5.0 MEDIUM 5.3 MEDIUM
Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied to our knowledge.