Microsoft Apm vulnerabilities
- microsoft apm Microsoft APM: Windows absolute-path tar member overwrite during legacy-bundle probing in `apm install` 5.5 Medium
- microsoft apm Microsoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree 7.4 High
- microsoft apm Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install 7.1 High