https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T08:54:40.591823+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-bower-cve-2019-5484 BREW-bower-CVE-2019-5484 — Symlink Arbitrary File Overwrite in bower 2026-10-23T08:54:40.621982+00:00

Affected: Homebrew: bower

Versions of `bower` prior to 1.8.8 are affected by an arbitrary file write vulnerability. The vulnerability occurs because `bower` does not verify that extracted symbolic links do not resolve to targets outside of the extraction root directory.

## Recommendation

Update to version 1.8.8 or later

 https://cve.radiocsirt.org/vuln/cve-2019-5484 CVE-2019-5484 2026-10-23T08:54:40.622043+00:00

Affected: bower

Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.