HIGH7.4PyPI
PYSEC-2026-2377· CVE-2026-45539, GHSA-q5pp-gvjg-h7v4Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree
Modified: 7/13/2026
package
PyPI/apm
pkg:pypi/apm
HIGH7.4PyPI
GHSA-q5pp-gvjg-h7v4· CVE-2026-45539, PYSEC-2026-2377Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree
Modified: 7/13/2026