https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:04:52.505589+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-50254 EUVD-2026-50254 2026-10-06T01:04:52.510368+00:00 EUVD-2026-50254 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5438 fkie_cve-2019-5438 2026-10-06T01:04:52.510408+00:00

Path traversal using symlink in npm harp module versions <= 0.29.0.

 https://cve.radiocsirt.org/vuln/ghsa-6fmm-47qc-p4m4 GHSA-6fmm-47qc-p4m4 — Unauthorized File Access in harp 2026-10-06T01:04:52.510441+00:00

Affected: npm: harp

All versions of `harp` are vulnerable to Unauthorized File Access. If a symlink in the project's base directory points to a file outside of the directory, the file is served. This could allow an attacker to access sensitive files on the server.

## Recommendation

No fix is currently available. Consider using an alternative module until a fix is made available.

 https://cve.radiocsirt.org/vuln/gsd-2019-5438 gsd-2019-5438 2026-10-06T01:04:52.510468+00:00 gsd-2019-5438