CLEANSTART-2026-OW30917

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OW30917.json

JSON Data

https://api.test.osv.dev/v1/vulns/CLEANSTART-2026-OW30917

Upstream

CVE-2021-39134

Published

2026-10-21T00:36:59Z

Modified

2026-10-21T01:15:29Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

`@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line interface, aims to guarantee that package dependency contra...

Details

Security vulnerability affects the nodejs-24 package. @npmcli/arborist, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line interface, aims to guarantee that package dependency contracts will be met, and the extraction of package contents will always be performed into the expected f....

References

Affected packages

CleanStart / nodejs-24

Package

Name: nodejs-24
Purl: pkg:apk/cleanstart/nodejs-24

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

14.17.6-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OW30917.json"