NodeJS/npm/6.14.4
a package manager for JavaScript
https://www.npmjs.com/package/npm
Artistic-2.0
1 Security Vulnerabilities
npm CLI exposing sensitive information through logs
Published date: 2020-07-07T18:56:16Z
CVE: CVE-2020-15095
Links:
- https://github.com/npm/cli/security/advisories/GHSA-93f3-23rq-pjfp
- https://nvd.nist.gov/vuln/detail/CVE-2020-15095
- https://github.com/advisories/GHSA-93f3-23rq-pjfp
- https://github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc
- https://github.com/npm/cli/blob/66aab417f836a901f8afb265251f761bb0422463/CHANGELOG.md#6146-2020-07-07
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00011.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00023.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4OOYAMJVLLCLXDTHW3V5UXNULZBBK4O6/
- https://security.gentoo.org/glsa/202101-07
Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like <protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>. The password value is not redacted and is printed to stdout and also to any generated log files.
Affected versions:
["1.1.25", "1.2.32", "1.3.2", "1.3.4", "1.2.20", "1.2.21", "1.2.22", "1.2.23", "1.2.24", "1.2.25", "1.2.27", "1.2.28", "1.2.30", "1.2.31", "1.3.0", "1.3.1", "1.2.19", "1.1.70", "1.1.71", "1.3.5", "1.3.6", "1.3.7", "1.3.8", "1.3.9", "1.3.10", "1.3.11", "1.3.12", "1.3.13", "1.3.14", "1.3.15", "1.3.16", "1.3.17", "1.3.18", "1.3.20", "1.3.21", "1.3.22", "1.3.23", "1.3.24", "1.3.25", "1.3.26", "1.4.0", "1.4.1", "1.4.2", "1.4.3", "1.4.4", "1.4.5", "1.4.6", "1.4.7", "1.4.8", "1.4.9", "1.4.10", "1.4.11", "1.4.12", "1.4.13", "1.4.14", "1.4.15", "1.4.16", "1.2.8000", "1.4.17", "1.4.18", "1.4.19", "1.5.0-alpha-0", "1.5.0-alpha-1", "1.4.20", "1.5.0-alpha-2", "1.4.21", "1.5.0-alpha-3", "1.5.0-alpha-4", "2.0.0-alpha-5", "1.4.22", "1.4.23", "2.0.0-alpha.6.0", "1.4.24", "2.0.0-alpha.6", "2.0.0-alpha.7", "2.0.0-beta.0", "1.4.25", "2.0.0-beta.1", "1.4.26", "2.0.0-beta.2", "1.4.27", "2.0.0-beta.3", "1.4.28", "2.0.0", "2.0.1", "2.0.2", "2.1.0", "2.1.1", "2.1.2", "2.1.3", "2.1.4", "2.1.5", "2.1.6", "2.1.7", "2.1.8", "2.1.9", "2.1.10", "2.1.11", "2.1.12", "2.1.13", "2.1.14", "2.1.15", "2.1.16", "2.1.17", "2.1.18", "2.2.0", "2.3.0", "2.4.0", "2.4.1", "2.5.0", "2.5.1", "2.6.0", "2.6.1", "2.7.0", "2.7.1", "2.7.2", "2.7.3", "2.7.4", "2.7.5", "2.7.6", "2.8.0", "2.8.1", "2.8.2", "2.8.3", "2.8.4", "2.9.0", "2.9.1", "2.10.0", "2.10.1", "2.11.0", "2.11.1", "2.11.2", "2.11.3", "2.12.0", "3.0.0", "2.12.1", "2.13.0", "3.1.0", "2.13.1", "3.1.1", "3.1.2", "2.13.2", "3.1.3", "2.13.3", "3.2.0", "2.13.4", "3.2.1", "2.13.5", "3.2.2", "2.14.0", "3.3.0", "2.14.1", "2.14.2", "3.3.1", "2.14.3", "3.3.2", "2.14.4", "3.3.3", "2.14.5", "3.3.4", "2.14.6", "3.3.5", "3.3.6", "2.14.7", "2.14.8", "3.3.7", "3.3.8", "3.3.9", "3.3.10", "2.14.9", "3.3.11", "1.4.29", "3.3.12", "2.14.10", "3.4.0", "3.4.1", "2.14.11", "2.14.12", "3.5.0", "3.5.1", "2.14.13", "2.14.14", "3.5.2", "2.14.15", "3.5.3", "3.5.4", "3.6.0", "2.14.16", "2.14.17", "3.7.0", "3.7.1", "3.7.2", "2.14.18", "3.7.3", "2.14.19", "2.14.20", "3.7.4", "3.7.5", "2.14.21", "3.8.0", "2.14.22", "3.8.1", "3.8.2", "2.15.0", "2.15.1", "3.8.3", "2.15.2", "3.8.4", "3.8.5", "3.8.6", "2.15.3", "3.8.7", "2.15.4", "3.8.8", "3.8.9", "2.15.5", "3.9.0", "3.9.1", "2.15.6", "3.9.2", "3.9.3", "3.9.4", "3.9.5", "3.9.6", "3.10.0", "2.15.7", "3.10.1", "2.15.8", "3.10.2", "3.10.3", "3.10.4", "2.15.9", "3.10.5", "3.10.6", "3.10.7", "2.15.10", "3.10.8", "2.15.11", "3.10.9", "4.0.0", "4.0.1", "4.0.2", "3.10.10", "4.0.3", "4.0.5", "4.1.0", "4.1.1", "4.1.2", "4.2.0", "4.3.0", "4.4.0", "4.4.1", "4.4.2", "4.4.3", "4.4.4", "4.5.0", "2.15.12", "4.6.0", "4.6.1", "5.0.0", "5.0.1", "5.0.2", "5.0.3", "5.0.4", "5.1.0", "5.2.0", "5.3.0", "5.4.0", "5.4.1", "5.4.2", "5.5.0", "5.5.1", "5.6.0", "5.7.0", "5.7.1", "5.8.0-next.0", "5.8.0", "6.0.0-next.0", "5.9.0-next.0", "5.10.0-next.0", "6.0.0-next.1", "6.0.0-next.2", "6.0.0", "6.0.1-next.0", "5.10.0-next.1", "6.0.1", "5.10.0", "6.1.0-next.0", "6.1.0", "6.2.0-next.0", "6.2.0-next.1", "6.2.0", "6.3.0-next.0", "6.3.0", "6.4.0-next.0", "6.4.0", "6.4.1-next.0", "6.4.1", "6.5.0-next.0", "6.5.0", "6.6.0-next.0", "6.6.0-next.1", "6.6.0", "6.7.0", "6.8.0-next.0", "6.8.0-next.1", "6.8.0-next.2", "6.8.0", "6.9.0-next.0", "6.9.0", "6.9.1-next.0", "6.9.2", "6.10.0-next.0", "6.10.0", "6.10.1-next.0", "6.10.1-next.1", "6.10.1-next.2", "6.10.1", "6.10.2-next.0", "6.10.2-next.1", "6.10.2-next.2", "6.10.2-next.3", "6.10.2", "6.10.3", "6.11.0", "6.11.1", "6.11.2", "6.11.3", "6.12.0-next.0", "6.12.0", "6.12.1", "6.13.0", "6.13.1", "6.13.2", "6.13.3", "6.13.4", "6.13.5", "6.13.6", "6.13.7", "6.14.0", "6.14.1", "6.14.2", "6.14.3", "6.14.4", "6.14.5"]
Secure versions:
[6.14.6, 6.14.7, 7.0.0-beta.0, 7.0.0-beta.1, 7.0.0-beta.2, 7.0.0-beta.3, 7.0.0-beta.4, 6.14.8, 7.0.0-beta.5, 7.0.0-beta.6, 7.0.0-beta.7, 7.0.0-beta.8, 7.0.0-beta.9, 7.0.0-beta.10, 7.0.0-beta.11, 7.0.0-beta.12, 7.0.0-beta.13, 7.0.0-rc.0, 7.0.0-rc.1, 7.0.0-rc.2, 7.0.0-rc.3, 7.0.0-rc.4, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.12, 7.0.13, 6.14.9, 7.0.14, 7.0.15, 7.1.0, 7.1.1, 7.1.2, 7.2.0, 6.14.10, 7.3.0, 7.4.0, 6.14.11, 7.4.1, 7.4.2, 7.4.3, 7.5.0, 7.5.1, 7.5.2, 7.5.3, 7.5.4, 7.5.5, 7.5.6, 7.6.0, 7.6.1, 7.6.2, 7.6.3, 7.7.0, 7.7.1, 7.7.2, 7.7.3, 7.7.4, 6.14.12, 7.7.5, 7.7.6, 7.8.0, 6.14.13, 6.14.14, 6.14.15, 6.14.16, 6.14.17, 8.11.0, 8.12.0, 8.12.1, 8.12.2, 8.13.0, 8.13.1, 8.13.2, 8.14.0, 8.15.0, 8.15.1, 8.16.0, 8.17.0, 8.18.0, 8.19.0, 8.19.1, 9.0.0-pre.0, 8.19.2, 9.0.0-pre.1, 9.0.0-pre.2, 9.0.0-pre.3, 9.0.0-pre.4, 9.0.0-pre.5, 9.0.0-pre.6, 9.0.0, 9.0.1, 9.1.0, 8.19.3, 9.1.1, 9.1.2, 9.1.3, 9.2.0, 6.14.18, 9.3.0, 9.3.1, 9.4.0, 9.4.1, 9.4.2, 8.19.4, 9.5.0, 9.5.1, 9.6.0, 9.6.1, 9.6.2, 9.6.3, 9.6.4, 9.6.5, 9.6.6, 9.6.7, 9.7.0, 9.7.1, 9.7.2, 9.8.0, 9.8.1, 10.0.0-pre.0, 10.0.0-pre.1, 10.0.0, 10.1.0, 10.2.0, 9.9.0, 10.2.1, 10.2.2, 10.2.3, 9.9.1, 9.9.2, 10.2.4, 10.2.5, 10.3.0, 10.4.0, 9.9.3, 10.5.0, 10.5.1, 10.5.2, 10.6.0, 10.7.0, 10.8.0]
Recommendation:
Update to version 10.8.0.
549 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 6.14.9 | Artistic-2.0 | 2020-11-20 - 20:49 | over 3 years | |
| 6.14.8 | Artistic-2.0 | 2020-08-17 - 20:50 | almost 4 years | |
| 6.14.7 | Artistic-2.0 | 2020-07-21 - 20:19 | almost 4 years | |
| 6.14.6 | Artistic-2.0 | 2020-07-07 - 17:14 | almost 4 years | |
| 6.14.5 | Artistic-2.0 | 1 | 2020-05-04 - 16:46 | about 4 years |
| 6.14.4 | Artistic-2.0 | 1 | 2020-03-25 - 15:46 | about 4 years |
| 6.14.3 | Artistic-2.0 | 1 | 2020-03-19 - 15:11 | about 4 years |
| 6.14.2 | Artistic-2.0 | 1 | 2020-03-03 - 18:36 | about 4 years |
| 6.14.1 | Artistic-2.0 | 1 | 2020-02-27 - 00:40 | about 4 years |
| 6.14.0 | Artistic-2.0 | 1 | 2020-02-25 - 19:07 | over 4 years |
| 6.13.7 | Artistic-2.0 | 1 | 2020-01-28 - 19:09 | over 4 years |
| 6.13.6 | Artistic-2.0 | 1 | 2020-01-09 - 23:00 | over 4 years |
| 6.13.5 | Artistic-2.0 | 1 | 2020-01-09 - 21:14 | over 4 years |
| 6.13.4 | Artistic-2.0 | 1 | 2019-12-11 - 19:05 | over 4 years |
| 6.13.3 | Artistic-2.0 | 2 | 2019-12-10 - 01:31 | over 4 years |
| 6.13.2 | Artistic-2.0 | 4 | 2019-12-03 - 17:55 | over 4 years |
| 6.13.1 | Artistic-2.0 | 4 | 2019-11-18 - 18:46 | over 4 years |
| 6.13.0 | Artistic-2.0 | 4 | 2019-11-05 - 19:47 | over 4 years |
| 6.12.1 | Artistic-2.0 | 4 | 2019-10-29 - 16:48 | over 4 years |
| 6.12.0 | Artistic-2.0 | 4 | 2019-10-08 - 15:43 | over 4 years |
| 6.12.0-next.0 | Artistic-2.0 | 4 | 2019-09-26 - 19:06 | over 4 years |
| 6.11.3 | Artistic-2.0 | 4 | 2019-09-03 - 22:18 | over 4 years |
| 6.11.2 | Artistic-2.0 | 4 | 2019-08-22 - 19:01 | almost 5 years |
| 6.11.1 | Artistic-2.0 | 4 | 2019-08-21 - 00:17 | almost 5 years |
| 6.11.0 | Artistic-2.0 | 4 | 2019-08-20 - 18:07 | almost 5 years |
| 6.10.3 | Artistic-2.0 | 4 | 2019-08-06 - 16:21 | almost 5 years |
| 6.10.2 | Artistic-2.0 | 4 | 2019-07-23 - 16:28 | almost 5 years |
| 6.10.2-next.3 | Artistic-2.0 | 4 | 2019-07-22 - 23:29 | almost 5 years |
| 6.10.2-next.2 | Artistic-2.0 | 4 | 2019-07-21 - 22:00 | almost 5 years |
| 6.10.2-next.1 | Artistic-2.0 | 4 | 2019-07-17 - 16:36 | almost 5 years |
| 6.10.2-next.0 | Artistic-2.0 | 4 | 2019-07-16 - 23:51 | almost 5 years |
| 6.10.1 | Artistic-2.0 | 4 | 2019-07-11 - 17:41 | almost 5 years |
| 6.10.1-next.2 | Artistic-2.0 | 4 | 2019-07-10 - 22:29 | almost 5 years |
| 6.10.1-next.1 | Artistic-2.0 | 4 | 2019-07-03 - 21:44 | almost 5 years |
| 6.10.1-next.0 | Artistic-2.0 | 4 | 2019-07-03 - 17:45 | almost 5 years |
| 6.10.0 | Artistic-2.0 | 4 | 2019-07-03 - 16:58 | almost 5 years |
| 6.10.0-next.0 | Artistic-2.0 | 4 | 2019-07-01 - 18:12 | almost 5 years |
| 6.9.2 | Artistic-2.0 | 4 | 2019-06-27 - 20:05 | almost 5 years |
| 6.9.1-next.0 | Artistic-2.0 | 4 | 2019-03-20 - 20:58 | about 5 years |
| 6.9.0 | Artistic-2.0 | 4 | 2019-03-06 - 18:59 | about 5 years |
| 6.9.0-next.0 | Artistic-2.0 | 4 | 2019-02-21 - 00:00 | over 5 years |
| 6.8.0 | Artistic-2.0 | 4 | 2019-02-13 - 23:19 | over 5 years |
| 6.8.0-next.2 | Artistic-2.0 | 4 | 2019-02-07 - 19:38 | over 5 years |
| 6.8.0-next.1 | Artistic-2.0 | 4 | 2019-02-06 - 22:41 | over 5 years |
| 6.8.0-next.0 | Artistic-2.0 | 4 | 2019-01-31 - 20:04 | over 5 years |
| 6.7.0 | Artistic-2.0 | 4 | 2019-01-23 - 22:12 | over 5 years |
| 6.6.0 | Artistic-2.0 | 4 | 2019-01-17 - 22:55 | over 5 years |
| 6.6.0-next.1 | Artistic-2.0 | 4 | 2019-01-10 - 19:53 | over 5 years |
| 6.6.0-next.0 | Artistic-2.0 | 4 | 2018-12-12 - 21:59 | over 5 years |
| 6.5.0 | Artistic-2.0 | 4 | 2018-12-10 - 22:27 | over 5 years |
| 6.5.0-next.0 | Artistic-2.0 | 4 | 2018-11-28 - 22:29 | over 5 years |
| 6.4.1 | Artistic-2.0 | 4 | 2018-08-29 - 18:21 | over 5 years |
| 6.4.1-next.0 | Artistic-2.0 | 4 | 2018-08-23 - 01:27 | almost 6 years |
| 6.4.0 | Artistic-2.0 | 4 | 2018-08-15 - 17:40 | almost 6 years |
| 6.4.0-next.0 | Artistic-2.0 | 4 | 2018-08-09 - 04:11 | almost 6 years |
| 6.3.0 | Artistic-2.0 | 4 | 2018-08-02 - 01:46 | almost 6 years |
| 6.3.0-next.0 | Artistic-2.0 | 4 | 2018-07-25 - 21:19 | almost 6 years |
| 6.2.0 | Artistic-2.0 | 4 | 2018-07-14 - 05:06 | almost 6 years |
| 6.2.0-next.1 | Artistic-2.0 | 4 | 2018-07-05 - 18:48 | almost 6 years |
| 6.2.0-next.0 | Artistic-2.0 | 4 | 2018-06-29 - 19:57 | almost 6 years |
| 6.1.0 | Artistic-2.0 | 4 | 2018-05-24 - 05:28 | about 6 years |
| 6.1.0-next.0 | Artistic-2.0 | 4 | 2018-05-17 - 22:11 | about 6 years |
| 6.0.1 | Artistic-2.0 | 4 | 2018-05-10 - 04:08 | about 6 years |
| 6.0.1-next.0 | Artistic-2.0 | 4 | 2018-05-04 - 20:58 | about 6 years |
| 6.0.0 | Artistic-2.0 | 4 | 2018-04-24 - 05:48 | about 6 years |
| 6.0.0-next.2 | Artistic-2.0 | 4 | 2018-04-21 - 04:16 | about 6 years |
| 6.0.0-next.1 | Artistic-2.0 | 4 | 2018-04-13 - 21:30 | about 6 years |
| 6.0.0-next.0 | Artistic-2.0 | 4 | 2018-03-23 - 23:09 | about 6 years |
| 5.10.0 | Artistic-2.0 | 4 | 2018-05-11 - 21:26 | about 6 years |
| 5.10.0-next.1 | Artistic-2.0 | 4 | 2018-05-07 - 23:30 | about 6 years |
| 5.10.0-next.0 | Artistic-2.0 | 4 | 2018-04-13 - 21:17 | about 6 years |
| 5.9.0-next.0 | Artistic-2.0 | 4 | 2018-03-23 - 23:20 | about 6 years |
| 5.8.0 | Artistic-2.0 | 4 | 2018-03-23 - 10:07 | about 6 years |
| 5.8.0-next.0 | Artistic-2.0 | 4 | 2018-03-13 - 00:28 | about 6 years |
| 5.7.1 | Artistic-2.0 | 4 | 2018-02-22 - 17:28 | over 6 years |
| 5.7.0 | Artistic-2.0 | 5 | 2018-02-21 - 21:38 | over 6 years |
| 5.6.0 | Artistic-2.0 | 5 | 2017-11-28 - 03:40 | over 6 years |
| 5.5.1 | Artistic-2.0 | 5 | 2017-10-04 - 16:49 | over 6 years |
| 5.5.0 | Artistic-2.0 | 5 | 2017-10-04 - 09:34 | over 6 years |
| 5.4.2 | Artistic-2.0 | 5 | 2017-09-15 - 00:49 | over 6 years |
| 5.4.1 | Artistic-2.0 | 5 | 2017-09-06 - 22:46 | over 6 years |
| 5.4.0 | Artistic-2.0 | 5 | 2017-08-23 - 01:00 | almost 7 years |
| 5.3.0 | Artistic-2.0 | 5 | 2017-07-14 - 05:12 | almost 7 years |
| 5.2.0 | Artistic-2.0 | 5 | 2017-07-11 - 00:48 | almost 7 years |
| 5.1.0 | Artistic-2.0 | 5 | 2017-07-06 - 01:57 | almost 7 years |
| 5.0.4 | Artistic-2.0 | 5 | 2017-06-26 - 18:55 | almost 7 years |
| 5.0.3 | Artistic-2.0 | 5 | 2017-06-05 - 23:09 | almost 7 years |
| 5.0.2 | Artistic-2.0 | 5 | 2017-06-02 - 23:46 | almost 7 years |
| 5.0.1 | Artistic-2.0 | 5 | 2017-06-01 - 02:19 | almost 7 years |
| 5.0.0 | Artistic-2.0 | 5 | 2017-05-26 - 03:27 | about 7 years |
| 4.6.1 | Artistic-2.0 | 5 | 2017-04-22 - 02:22 | about 7 years |
| 4.6.0 | Artistic-2.0 | 5 | 2017-04-22 - 01:14 | about 7 years |
| 4.5.0 | Artistic-2.0 | 5 | 2017-03-24 - 23:41 | about 7 years |
| 4.4.4 | Artistic-2.0 | 5 | 2017-03-16 - 23:58 | about 7 years |
| 4.4.3 | Artistic-2.0 | 5 | 2017-03-16 - 01:20 | about 7 years |
| 4.4.2 | Artistic-2.0 | 5 | 2017-03-10 - 01:09 | about 7 years |
| 4.4.1 | Artistic-2.0 | 5 | 2017-03-06 - 19:18 | about 7 years |
| 4.4.0 | Artistic-2.0 | 5 | 2017-02-24 - 03:56 | over 7 years |
| 4.3.0 | Artistic-2.0 | 5 | 2017-02-09 - 23:53 | over 7 years |
| 4.2.0 | Artistic-2.0 | 5 | 2017-01-26 - 12:51 | over 7 years |