CVE-2016-10538
The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have acce…
Published: 2018-05-31 · CVSS: Unscored
The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7