Description
Path traversal using symlink in npm harp module versions <= 0.29.0.
Remediation
References
https://hackerone.com/reports/530289
Related Vulnerabilities
CVE-2021-43306 Vulnerability in npm package jquery-validation
CVE-2017-11341 Vulnerability in maven package org.webjars.npm:node-sass
CVE-2022-22984 Vulnerability in npm package snyk-gradle-plugin
CVE-2021-43841 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2018-20677 Vulnerability in maven package org.webjars.bowergithub.angular-ui:bootstrap