npm/@humanfs/node: medium
humanfs: Recursive copy follows symlinked files and copies data from outside the source tree
Action: Upgrade @humanfs/node to 0.16.8 or later.
npm i @humanfs/node@0.16.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.8 | - |
Fixed versions
| 0.16.8 |
Sources
- osv: GHSA-p498-v437-472g
- https://github.com/humanwhocodes/humanfs/security/advisories/GHSA-p498-v437-472g
- https://github.com/humanwhocodes/humanfs/commit/22bbaa4487a3e6c1197ca619840de4615d0c3404
- https://github.com/humanwhocodes/humanfs
- https://github.com/humanwhocodes/humanfs/releases/tag/node-v0.16.8
published · modified · JSON