Skip to content
OpenAdvisories

Package · Ubuntu

node-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Low —
    CVE-2016-10538

    Arbitrary File Write in cli

    The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.

    HackerOne cli node module cli node-cli Ubuntu npm