@npmcli/arborist (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @npmcli/arborist, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2021-39134 — CVSS 8.2 (high): `@npmcli/arborist`, the library that calculates dependency trees and manages the `node_modules` folder hierarchy for the npm command line…
• CVE-2021-39135 — CVSS 8.2 (high): `@npmcli/arborist`, the library that calculates dependency trees and manages the node_modules folder hierarchy for the npm command line…