Debian/node-log4js: medium 5.5
log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could ca
Action: Upgrade node-log4js to 6.4.1+~cs8.3.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.4.1+~cs8.3.5-1 | - |
Fixed versions
| 6.4.1+~cs8.3.5-1 |
Sources
- osv: DEBIAN-CVE-2022-21704#Debian:13/node-log4js
- https://security-tracker.debian.org/tracker/CVE-2022-21704
published · modified · JSON