Description
Path traversal using symlink in npm harp module versions <= 0.29.0.
Remediation
References
https://hackerone.com/reports/530289
Related Vulnerabilities
CVE-2023-29509 Vulnerability in maven package org.xwiki.platform:xwiki-platform-flamingo-theme-ui
CVE-2022-36921 Vulnerability in maven package org.jenkins-ci.plugins:coverity
CVE-2022-0086 Vulnerability in npm package uppy
CVE-2020-7760 Vulnerability in npm package codemirror
CVE-2022-39386 Vulnerability in npm package fastify-websocket