@fallow-cli/fallow-node vulnerabilities
CVEs whose affected-version data names the @fallow-cli/fallow-node package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-h4fr-cmh5-qr62Low· 3.3Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
▾ Sunlitfallow · fallowvia GHSA
CVE-2026-115569Low· 3.3Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root
Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root
▾ Sunlitfallow · fallowvia GHSA