Lucene search

K
osvGoogleOSV:USN-4785-1
HistoryMar 15, 2021 - 9:03 p.m.

npm vulnerability

2021-03-1521:03:23
Google
osv.dev
5

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.9%

It was discovered that the npm command-line interface mishandled certain
sensitive information. An attacker could use this vulnerability to collect
authentication information that could be used to impersonate other users.

6.2 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.9%