← Back

Chownr

chownr

Vendor: Chownr Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Chownr Project
1Chownr
Nov 21, 2024
Jun 15, 2020
N/A· v4
2.5 LOW· v3
1.9 LOW· v2
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.