CVE-2016-3956
1 advisory.
npm/npm CVE-2016-3956: high
npm Token Leak in npm
Action: Upgrade npm to 2.15.1 or later.
npm i npm@2.15.1npm i npm@3.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.15.1 | - |
| 3.0.0 | 3.8.3 | - |
Fixed versions
| 2.15.1 | 3.8.3 |
Sources
- osv: GHSA-m5h6-hr3q-22h5
- https://nvd.nist.gov/vuln/detail/CVE-2016-3956
- https://github.com/npm/npm/issues/8380
- https://github.com/npm/npm/commit/f67ecad59e99a03e5aad8e93cd1a086ae087cb29
- https://github.com/npm/npm/commit/fea8cc92cee02c720b58f95f14d315507ccad401
- https://github.com/advisories/GHSA-m5h6-hr3q-22h5
- https://nodejs.org/en/blog/vulnerability/npm-tokens-leak-march-2016
- https://www.npmjs.com/advisories/98
- http://blog.npmjs.org/post/142036323955/fixing-a-bearer-token-vulnerability
- http://www-01.ibm.com/support/docview.wss?uid=swg21980827
CVE-2016-3956 · published · modified · JSON