npm CLI CVE-2019-16776 Arbitrary File Write Vulnerability

🗓️ 11 Dec 2019 00:00:00Reported by Symantec Security ResponseType

npm CLI arbitrary file-write vulnerability in versions prior to npm 6.13.

Reporter	Title	Published	Views	Family All 106
IBM Security Bulletins	Security Bulletin: Vulnerability in npm affects IBM VM Recovery Manager HA	30 Jul 202121:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Node.js	17 May 202320:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in npm affects IBM VM Recovery Manager DR	30 Jul 202121:12	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
FreeBSD	NPM -- Multiple vulnerabilities	18 Dec 201900:00	–	freebsd
AlmaLinux	nodejs:12 enhancement update	4 Feb 202008:35	–	almalinux
AlmaLinux	Important: nodejs:10 security update	25 Feb 202007:57	–	almalinux
BDU FSTEC	The vulnerability of the command-line tools for package managers NPM and Yarn allows a hacker to write arbitrary files.	17 Dec 201900:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : nodejs:10 (CESA-2020:0579)	1 Feb 202100:00	–	nessus
Tenable Nessus	Fedora 31 : 1:libuv / 1:nodejs (2020-595ce5e3cc)	27 Jan 202000:00	–	nessus