Lucene search

Arbitrary File Write in npm

🗓️ 13 Dec 2019 15:19:39Reported by GitHub Advisory DatabaseType

Versions of npm CLI < 6.13.3 vulnerable to Arbitrary File Write through bin field in package.jso

Reporter	Title	Published	Views	Family All 72
OSV	CVE-2019-16775	13 Dec 201901:15	–	osv
OSV	CGA-VW3X-PF52-29HF	25 Sep 202405:35	–	osv
OSV	Arbitrary File Write in npm	13 Dec 201915:39	–	osv
OSV	CGA-R7X8-7XC9-5M6P	25 Sep 202405:33	–	osv
OSV	CGA-9C47-RQW6-G736	25 Sep 202405:18	–	osv
OSV	CGA-QMX7-MQCQ-3J68	25 Sep 202405:32	–	osv
OSV	CGA-8W94-PP46-7QVQ	25 Sep 202405:18	–	osv
OSV	CGA-98VH-V44P-JCG7	25 Sep 202405:18	–	osv
OSV	nodejs:12 enhancement update	4 Feb 202008:35	–	osv
OSV	RHEA-2020:0330 Red Hat Enhancement Advisory: nodejs:12 enhancement update	13 Sep 202416:10	–	osv

Vulners

Node

npmjs npmRange<6.13.3

Source	Link
github	www.github.com/npm/cli/security/advisories/GHSA-m6cx-g6qm-p2cx
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-16775
blog	www.blog.npmjs.org/post/189618601100/binary-planting-with-the-npm-cli
github	www.github.com/advisories/GHSA-m6cx-g6qm-p2cx
npmjs	www.npmjs.com/advisories/1434
access	www.access.redhat.com/errata/RHEA-2020:0330
access	www.access.redhat.com/errata/RHSA-2020:0573
access	www.access.redhat.com/errata/RHSA-2020:0579
access	www.access.redhat.com/errata/RHSA-2020:0597
access	www.access.redhat.com/errata/RHSA-2020:0602

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2019 15:39Current

2.2Low risk

Vulners AI Score2.2

CVSS24

CVSS36.5 - 7.7

EPSS0.00222