Lucene search
+L

1 matches found

OSV
OSV
added 2021/04/02 8:25 p.m.12 views

MGASA-2021-0169 Updated nodejs-chownr packages fix security vulnerability

Updated nodejs-chownr package fixes security vulnerability: A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks CVE-2017-18869...

2.5CVSS3.9AI score0.00336EPSS
SaveExploits1References2
Rows per page
Query Builder