Skip to content
OpenAdvisories

Package · Ubuntu

node-log4js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.5
    CVE-2022-21704

    Incorrect Default Permissions in log4js-node

    log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile appenders are world-readable (in unix). This could cause problems if log files contain sensitive information. Th…

    log4js-node log4js-node node-log4js log4js Debian Ubuntu npm