1 matches found
MGASA-2021-0169 Updated nodejs-chownr packages fix security vulnerability
Updated nodejs-chownr package fixes security vulnerability: A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks CVE-2017-18869...
2.5CVSS3.9AI score0.00336EPSS
SaveExploits1References2
20