Поиск уязвимостей
Количество 15
Количество 15
BDU:2019-04691
Уязвимость набора инструментов командной строки пакетных менеджеров NPM и Yarn, позволяющая нарушителю записывать произвольные файлы
ALT-PU-2019-3385
ALT-PU-2019-3385: package `npm` update to version 6.13.4-alt1
CVE-2019-16775
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option.
CVE-2019-16775
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option.
CVE-2019-16775
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option.
CVE-2019-16775
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary ...
GHSA-m6cx-g6qm-p2cx
Arbitrary File Write in npm
openSUSE-SU-2020:0059-1
Security update for nodejs8
SUSE-SU-2020:0247-1
Security update for nodejs6
SUSE-SU-2020:0104-1
Security update for nodejs10
SUSE-SU-2020:0063-1
Security update for nodejs10
SUSE-SU-2020:0043-1
Security update for nodejs8
SUSE-SU-2020:0429-1
Security update for nodejs12
RLSA-2020:0579
Important: nodejs:10 security update
ELSA-2020-0579
ELSA-2020-0579: nodejs:10 security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2019-04691 Уязвимость набора инструментов командной строки пакетных менеджеров NPM и Yarn, позволяющая нарушителю записывать произвольные файлы | CVSS3: 7.7 | 3% Низкий | почти 7 лет назад |
| ALT-PU-2019-3385 ALT-PU-2019-3385: package `npm` update to version 6.13.4-alt1 | CVSS3: 8.1 | почти 7 лет назад | |
 | CVE-2019-16775 Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option. | CVSS3: 6.5 | 3% Низкий | почти 7 лет назад |
 | CVE-2019-16775 Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option. | CVSS3: 4.8 | 3% Низкий | почти 7 лет назад |
 | CVE-2019-16775 Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon installation. A properly constructed entry in the package.json bin field would allow a package publisher to create a symlink pointing to arbitrary files on a user's system when the package is installed. This behavior is still possible through install scripts. This vulnerability bypasses a user using the --ignore-scripts install option. | CVSS3: 6.5 | 3% Низкий | почти 7 лет назад |
| CVE-2019-16775 Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary ... | CVSS3: 6.5 | 3% Низкий | почти 7 лет назад |
| GHSA-m6cx-g6qm-p2cx Arbitrary File Write in npm | CVSS3: 7.7 | 3% Низкий | почти 7 лет назад |
 | openSUSE-SU-2020:0059-1 Security update for nodejs8 | почти 7 лет назад | ||
| SUSE-SU-2020:0247-1 Security update for nodejs6 | почти 7 лет назад | ||
| SUSE-SU-2020:0104-1 Security update for nodejs10 | почти 7 лет назад | ||
| SUSE-SU-2020:0063-1 Security update for nodejs10 | почти 7 лет назад | ||
| SUSE-SU-2020:0043-1 Security update for nodejs8 | почти 7 лет назад | ||
| SUSE-SU-2020:0429-1 Security update for nodejs12 | больше 6 лет назад | ||
 | RLSA-2020:0579 Important: nodejs:10 security update | больше 6 лет назад | ||
| ELSA-2020-0579 ELSA-2020-0579: nodejs:10 security update (IMPORTANT) | больше 6 лет назад |
Уязвимостей на страницу