Homepage

apm-cli@0.4.2

MCP configuration tool

  • latest version

    0.14.1

  • latest non vulnerable version

    0.14.1

  • first published

    8 months ago

  • latest version published

    1 days ago

  • licenses detected

  • View apm-cli package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the apm-cli package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    External Control of File Name or Path

    apm-cli is a MCP configuration tool

    Affected versions of this package are vulnerable to External Control of File Name or Path through improper validation of manifest-controlled paths in the plugin.json file during the installation process. An attacker can cause arbitrary files or directories from the host system to be copied into the managed install output by specifying absolute or traversal paths in the manifest fields, potentially leading to exposure or integration of sensitive host content into the project.

    How to fix External Control of File Name or Path?

    Upgrade apm-cli to version 0.8.12 or higher.

    [,0.8.12)
    Go back to all versions of this package