TI-2013-03595 CVE-2013-4116 · GHSA-v3jv-wrf4-5845lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite…Priority LOW 16lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives.CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00372 · Published 2014-04-22 · Partial fix · 1.3.3 CWE-59
