https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 09:43:08 +0000 https://cve.radiocsirt.org/vuln/brew-bower-cve-2019-5484 <p><strong>Affected:</strong> Homebrew: bower</p> <p>Versions of `bower` prior to 1.8.8 are affected by an arbitrary file write vulnerability. The vulnerability occurs because `bower` does not verify that extracted symbolic links do not resolve to targets outside of the extraction root directory.</p> <p>## Recommendation</p> <p>Update to version 1.8.8 or later</p> <p><strong>Affected:</strong> Homebrew: bower</p> <p>Versions of `bower` prior to 1.8.8 are affected by an arbitrary file write vulnerability. The vulnerability occurs because `bower` does not verify that extracted symbolic links do not resolve to targets outside of the extraction root directory.</p> <p>## Recommendation</p> <p>Update to version 1.8.8 or later</p> https://cve.radiocsirt.org/vuln/brew-bower-cve-2019-5484 https://cve.radiocsirt.org/vuln/euvd-2026-50300 EUVD-2026-50300 https://cve.radiocsirt.org/vuln/euvd-2026-50300 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5484 <p>Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.</p> <p>Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5484 https://cve.radiocsirt.org/vuln/ghsa-p6mr-pxg4-68hx <p><strong>Affected:</strong> npm: bower</p> <p>Versions of `bower` prior to 1.8.8 are affected by an arbitrary file write vulnerability. The vulnerability occurs because `bower` does not verify that extracted symbolic links do not resolve to targets outside of the extraction root directory.</p> <p>## Recommendation</p> <p>Update to version 1.8.8 or later</p> <p><strong>Affected:</strong> npm: bower</p> <p>Versions of `bower` prior to 1.8.8 are affected by an arbitrary file write vulnerability. The vulnerability occurs because `bower` does not verify that extracted symbolic links do not resolve to targets outside of the extraction root directory.</p> <p>## Recommendation</p> <p>Update to version 1.8.8 or later</p> https://cve.radiocsirt.org/vuln/ghsa-p6mr-pxg4-68hx https://cve.radiocsirt.org/vuln/gsd-2019-5484 gsd-2019-5484 https://cve.radiocsirt.org/vuln/gsd-2019-5484