Vulnerabilities > Npmjs > Node Packaged Modules > 1.3.2

DATE CVE VULNERABILITY TITLE RISK
2014-04-22 CVE-2013-4116 Link Following vulnerability in Npmjs Node Packaged Modules 1.3.2
lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives.
local
npmjs CWE-59
3.3