npm Alert
2731Warning Date
Severity Level
Warning Number
Target Sector
31 August, 2022
● Critical
2022-5177
All
npm has released security update to address a vulnerability in the following product:
- nodebb
- < 1.19.8
- = 2.0.0
Attacker could exploit this vulnerability by doing the following:
- Take over any account without the involvement of the victim
The CERT team encourages users to review npm security advisory and apply the necessary updates: