Read the docs

Npmjs

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Npmjs records in CISA KEV

No Npmjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Npm 8 records MEDIUM Tar 3 records MEDIUM Arborist 2 records LOW Hosted-git-info 1 record LOW Npm-user-validate 1 record LOW Semver 1 record HIGH

Records

2 records in Arborist · all components

TI-2021-16522 CVE-2021-39135 · GHSA-gmw6-94gg-2rc2

UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

Priority LOW 36

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the…

CVSS 3.1HIGH 8.2 Local No auth User interaction EPSS 0.00564 Published 2021-08-31 Fixed in 2.8.2 CWE-61
TI-2021-16521 CVE-2021-39134 · GHSA-2h3h-q99f-3fhc

UNIX Symbolic Link (Symlink) Following in @npmcli/arborist

Priority LOW 36

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and th…

CVSS 3.1HIGH 8.2 Local No auth User interaction EPSS 0.00588 Published 2021-08-31 Fixed in 2.8.2 CWE-61
Open these records in search →