GHSA lookup
GHSA-Q5PP-GVJG-H7V4
Pruva has a verified reproduction for GHSA-Q5PP-GVJG-H7V4: Microsoft APM: arbitrary file disclosure via symlink-following on apm install. The canonical evidence record is REPRO-2026-00136.
REPRO
REPRO-2026-00136
Package
apm · pip
Severity
HIGH
Status
published