All products

apm-cli

PyPI · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install`CVE-2026-46383 · GHSA-MQ5J-PW29-JCV3Version ranges need review. apm-cli PyPI Medium Fix reported
Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during installCVE-2026-44641 · GHSA-XHRW-5QXX-JPWRVersion ranges need review. apm-cli PyPI High Fix reported