Description
Path traversal using symlink in npm harp module versions <= 0.29.0.
Remediation
References
https://hackerone.com/reports/530289
Related Vulnerabilities
CVE-2019-13000 Vulnerability in maven package fr.acinq.eclair:eclair-core_2.11
CVE-2021-23899 Vulnerability in maven package com.mikesamuel:json-sanitizer
CVE-2021-23419 Vulnerability in npm package open-graph
CVE-2020-7743 Vulnerability in maven package org.webjars.npm:mathjs
CVE-2023-37950 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration