Vulnerabilities

TI-2019-12557 CVE-2019-16777 · GHSA-4328-8hgf-7wjr

Arbitrary File Overwrite in npm CLI

LOW 38

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.02043 Published 2019-12-13 Partial fix · 6.13.4 CWE-22

TI-2019-12556 CVE-2019-16776 · GHSA-x8qc-rrcw-4r46

MEDIUM 41

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.03412 Published 2019-12-13 Partial fix · 6.13.3 CWE-22

TI-2019-12555 CVE-2019-16775 · GHSA-m6cx-g6qm-p2cx

LOW 39

Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.02897 Published 2019-12-13 Partial fix · 6.13.3 CWE-61