CVE-2019-5438: Harpjs Harp

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Path traversal using symlink in npm harp module versions <= 0.29.0.

Affected products

• Harpjs Harp: up to and including 0.29.0

Published 2019-05-10. Last modified 2026-06-17.