Skip to main content

Arborist

2 CVEs product

Monthly

CVE-2021-39135 Aug 31, 17:15 npm HIGH PATCH This Week

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Node.js Oracle Siemens Graalvm +3
NVD HeroDevs GitHub
CVSS 3.1
7.8
EPSS
0.6%
CVE-2021-39134 Aug 31, 17:15 npm HIGH PATCH This Week

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Node.js Apple Microsoft Oracle +5
NVD HeroDevs GitHub
CVSS 3.1
7.8
EPSS
0.6%
EPSS 1% CVSS 7.8
HIGH PATCH This Week

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Node.js Oracle +5
NVD HeroDevs GitHub
EPSS 1% CVSS 7.8
HIGH PATCH This Week

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Node.js Apple +7
NVD HeroDevs GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy