CVE-2019-5437CWE-548

CVE-2019-5437: vulnerability in harp

Published · Updated

Follow this CVE+ Monitor harp+ Monitor harp

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and no fix was applied to our knowledge.
Affected products
n/a · harp