apm-cli vulnerabilities (PyPI)

2 vulnerabilities.

• apm-cli PyPI Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install` CVE-2026-46383 Fix available 5.5 MediumMay 15, 2026
• apm-cli PyPI Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install CVE-2026-44641 Fix available 7.1 HighMay 7, 2026