{"action":"Upgrade chownr to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"chownr","cve_ids":["CVE-2017-18869"],"ecosystem":"npm","epss":0.00334,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-c6rq-rjc2-86v2","id":"tcs_01M5KFHZFYP4G39TAJV99F5F5C","modified_at":"2023-11-08T03:59:16.650985Z","published_at":"2022-02-10T23:33:39Z","references":["https://osv.dev/vulnerability/GHSA-c6rq-rjc2-86v2","https://nvd.nist.gov/vuln/detail/CVE-2017-18869","https://github.com/isaacs/chownr/issues/14","https://github.com/isaacs/chownr/commit/36a93e3f0a220062c47b237cf6ab6d5f55cd79c9","https://github.com/isaacs/chownr/commit/a631d841022880e5c8d694408a7e96d6d576d0ce","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863985","https://bugzilla.redhat.com/show_bug.cgi?id=1611614","https://snyk.io/vuln/npm:chownr:20180731"],"severity":{"label":"low","score":2.5},"sources":[{"source":"osv","source_id":"GHSA-c6rq-rjc2-86v2","url":"https://osv.dev/vulnerability/GHSA-c6rq-rjc2-86v2"}],"summary":"Time-of-check Time-of-use (TOCTOU) Race Condition in chownr"}