Node Packaged Modules Project Node Packaged Modules vulnerabilities

1 known vulnerability affecting node_packaged_modules_project/node_packaged_modules.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2013-4116LOWCVSS 3.3fixed in 1.3.32014-04-22

CVE-2013-4116 [LOW] CWE-59 CVE-2013-4116: lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary fil lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives.