harbor.ist
@harbor.ist
and another related one:

www.cve.org/CVERecord?id...

This is on all versions v2.4.11 and below of the npmjs.com/sha.js package.

NOTE: this applies to all node and browser versions; please upgrade to v2.4.12 or later!
www.cve.org
August 20, 2025 at 9:59 PM
To clarify, the Harborist CNA's current scope covers projects maintained by @jordan.har.band which are listed here: npmjs.com/~ljharb
npm | Profile
npmjs.com
May 30, 2025 at 7:09 PM