Arborist

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-39135 npm HIGH PATCH This Week

`@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Node.js Information Disclosure Arborist Graalvm Sinec Infrastructure Network Services

NVD GitHub

CVSS 3.1

7.8

EPSS

0.6%

CVE-2021-39134 npm HIGH PATCH This Week

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Apple Microsoft Node.js Information Disclosure Arborist +2

NVD GitHub

CVSS 3.1

7.8

EPSS

0.6%

CVE-2021-39135 npm

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Node.js Information Disclosure Arborist +2

NVD GitHub

CVE-2021-39134 npm

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Apple Microsoft Node.js +4

NVD GitHub