Skip to content
OpenAdvisories

Package · npm

pkg

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2024-24828

    Local Privilege Escalation in execuatables bundled by pkg

    pkg is tool design to bundle Node.js projects into an executables. Any native code packages built by `pkg` are written to a hardcoded directory. On unix systems, this is `/tmp/pkg/*` which is a shared directory for all users on the same local system. There is…

    vercel pkg pkg npm