Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 08:50:45 +0000 CVE-2018-7408 https://vulnerability.circl.lu/vuln/cve-2018-7408 <p>An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as &#34;next: 5.7.0&#34; and therefore automatically installed by an &#34;npm upgrade -g npm&#34; command, and also announced in the vendor&#39;s blog without mention of pre-release status). It might allow local users to bypass intended filesystem access restrictions because ownerships of /etc and /usr directories are being changed unexpectedly, related to a &#34;correctMkdir&#34; issue.</p> <p>An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as &#34;next: 5.7.0&#34; and therefore automatically installed by an &#34;npm upgrade -g npm&#34; command, and also announced in the vendor&#39;s blog without mention of pre-release status). It might allow local users to bypass intended filesystem access restrictions because ownerships of /etc and /usr directories are being changed unexpectedly, related to a &#34;correctMkdir&#34; issue.</p> https://vulnerability.circl.lu/vuln/cve-2018-7408 GHSA-ph34-pc88-72gc — Incorrect Permission Assignment for Critical Resource in NPM https://vulnerability.circl.lu/vuln/ghsa-ph34-pc88-72gc <p><strong>Affected:</strong> npm: npm</p> <p>An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as &#34;next: 5.7.0&#34; and therefore automatically installed by an &#34;npm upgrade -g npm&#34; command, and also announced in the vendor&#39;s blog without mention of pre-release status). It might allow local users to bypass intended filesystem access restrictions because ownerships of /etc and /usr directories are being changed unexpectedly, related to a &#34;correctMkdir&#34; issue.</p> <p><strong>Affected:</strong> npm: npm</p> <p>An issue was discovered in an npm 5.7.0 2018-02-21 pre-release (marked as &#34;next: 5.7.0&#34; and therefore automatically installed by an &#34;npm upgrade -g npm&#34; command, and also announced in the vendor&#39;s blog without mention of pre-release status). It might allow local users to bypass intended filesystem access restrictions because ownerships of /etc and /usr directories are being changed unexpectedly, related to a &#34;correctMkdir&#34; issue.</p> https://vulnerability.circl.lu/vuln/ghsa-ph34-pc88-72gc