EUVD-2020-0546

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Versions of npm CLI before 6.14.6 expose passwords in logs and stdout, creating a security risk.

Reporter	Title	Published	Views	Family All 138
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Node.js (CVE-2020-15095)	28 Sep 202018:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Node.js	17 May 202320:51	–	ibm
IBM Security Bulletins	Security Bulletin: Images built from IBM App Connect Enterprise Certified Container images may be vulnerable to information exposure via CVE-2020-15095	29 Apr 202111:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Applications 4.3 nodejs and nodejs-express Appsody stacks is vulnerable to information disclosure, buffer overflow and prototype pollution exposures	8 Jun 202100:42	–	ibm
IBM Security Bulletins	Security Bulletin: A Node.js npm CLI module vulnerability affects IBM® SDK for Node.js™ in IBM Cloud (CVE-2020-15095)	1 Oct 202014:30	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
ATTACKERKB	CVE-2020-15095	7 Jul 202019:15	–	attackerkb
AlmaLinux	Moderate: nodejs:12 security and bug fix update	19 Oct 202007:13	–	almalinux
AlmaLinux	Moderate: nodejs:10 security update	16 Feb 202107:34	–	almalinux

[
  {
    "enisaIdVendor": [
      {
        "id": "9b21349e-44cf-3589-b1a9-407ac4ac4061",
        "vendor": {
          "name": "npm"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "fe8c1422-8a32-3a64-ae13-b8378e8dd52e",
        "product": {
          "name": "cli"
        },
        "product_version": "< 6.14.6"
      }
    ]
  }
]

Source	Link
github	www.github.com/npm/cli/security/advisories/GHSA-93f3-23rq-pjfp
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-15095
github	www.github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc
github	www.github.com/npm/cli/blob/66aab417f836a901f8afb265251f761bb0422463/CHANGELOG.md
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6
security	www.security.gentoo.org/glsa/202101-07
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00011.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00015.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-10/msg00023.html
suse	www.suse.com/security/cve/CVE-2020-15095.html

07 Oct 2025 00:30Current

7High risk

Vulners AI Score7

CVSS 3.14.4

CVSS 21.9

EPSS0.0013