Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/node-chownr@2.0.0-3?distro=trixie
purl pkg:deb/debian/node-chownr@2.0.0-3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-9qdm-4xaz-qqhd Time-of-check Time-of-use (TOCTOU) Race Condition in chownr A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks. CVE-2017-18869
GHSA-c6rq-rjc2-86v2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:17:49.155245+00:00 Debian Importer Fixing VCID-9qdm-4xaz-qqhd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-11T18:12:44.416126+00:00 Debian Importer Fixing VCID-9qdm-4xaz-qqhd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:47:06.149604+00:00 Debian Importer Fixing VCID-9qdm-4xaz-qqhd https://security-tracker.debian.org/tracker/data/json 38.1.0