@humanfs/node (npm)
A modern filesystem API for JavaScript
Advisories
2
Latest version
0.17.0
Released Sep 10, 2026
License
Apache-2.0
OpenSSF Scorecard
—
How to fix
Upgrading to 0.16.8 or later clears every advisory below that has a fix.
Upgrade commands
npm
npm install @humanfs/node@0.17.0yarn
yarn add @humanfs/node@0.17.0pnpm
pnpm add @humanfs/node@0.17.0Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-p498-v437-472g humanfs: Recursive copy follows symlinked files and copies data from outside the source tree |
Medium | < 0.16.8 | 0.16.8 |
| GHSA-p498-v437-472g humanfs: Recursive copy follows symlinked files and copies data from outside the source tree |
Medium | < 0.16.8 | 0.16.8 |
Source: git+https://github.com/humanwhocodes/humanfs.git
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor