Debian/npm: medium 6.5
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of thenode_modules folder through the bin field upon
Action: Upgrade npm to 6.13.4+ds-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.13.4+ds-2 | - |
Fixed versions
| 6.13.4+ds-2 |
Sources
published · modified · JSON