Known vulnerabilities in Harp

Vendor: npm Inc.
Software: Harp
Software CPE: cpe:2.3:a:npm:harp:*:*:*:*:*:*:*:*
Website: https://www.npmjs.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Harp Harp is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25108 - Improper Link Resolution Before File Access ('Link Following')
 CWE-59 Medium
No
No
 - 10.02.2020 SB2020021008
#VU18439 - UNIX Symbolic Link (Symlink) Following
CVE-2019-5438		 CWE-61 Low
No
No
 0.30.0 14.05.2019 SB2019051104
#VU18436 - Exposure of sensitive information to an unauthorized actor
CVE-2019-5437		 CWE-200 Medium
No
No
 0.30.0 13.05.2019 SB2019051103