Most recent entries from all

bdu:2024-01722

certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-1103

cnvd-2021-25694

EUVD-2026-80613

fkie_cve-2017-18869

A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.

GHSA-c6rq-rjc2-86v2 — Time-of-check Time-of-use (TOCTOU) Race Condition in chownr

Affected: npm: chownr

A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.

gsd-2017-18869

RHSA-2020:2625 — Red Hat Security Advisory: rh-nodejs8-nodejs security update

nodejs-brace-expansion: Regular expression denial of service nodejs-chownr: TOCTOU vulnerability in `chownr` function in chownr.js nodejs-sshpk: ReDoS when parsing crafted invalid public keys in lib/formats/ssh.js nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties npm: Symlink reference outside of node_modules folder through the bin field upon installation npm: Arbitrary file write via constructed entry in the package.json bin field npm: Global node_modules Binary Overwrite

UBUNTU-CVE-2017-18869

Affected: Ubuntu:20.04:LTS: node-chownr, Ubuntu:22.04:LTS: node-chownr, Ubuntu:24.04:LTS: node-chownr, Ubuntu:25.10: node-chownr, Ubuntu:26.04:LTS: node-chownr

A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.

WID-SEC-W-2026-2183 — Red Hat Software Collections: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Software Collections ausnutzen, um die Vertraulichkeit, Verfügbarkeit und die Integrität der Anwendungen zu gefährden.