← Back

Chownr Project

chownr_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Chownr
chownr
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18869
1Chownr Project
1Chownr
Nov 21, 2024
Jun 15, 2020
N/A· v4
2.5 LOW· v3
1.9 LOW· v2
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.