Control: tags -1 + confirmed On Thu, 2020-05-14 at 09:45 +0200, Xavier Guimard wrote: > CVE-2020-8116 fix introduced a regression that affects npm (#960283). > This little fix solves the problem. > Hrm, we really should have spotted that sooner. :-( Is there any way we can improve the tests to notice this? Please go ahead. Regards, Adam