Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/sync-exec@0.3.1
purl pkg:npm/sync-exec@0.3.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-db85-vvr3-b7ht
Aliases:
GMS-2016-9
Tmp files readable by other users The sync-exec module is used to simulate child_process.execSync in node Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the server to obtain confidential information from the buffer/tmp file, while it exists. There are no reported fixed by versions.
VCID-q9x5-acyz-nffy
Aliases:
CVE-2017-16024
GHSA-38h8-x697-gh8q
Tmp files readable by other users in sync-exec There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T16:59:45.408049+00:00 GitLab Importer Affected by VCID-q9x5-acyz-nffy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/sync-exec/CVE-2017-16024.yml 38.6.0
2026-06-12T16:49:29.081267+00:00 GitLab Importer Affected by VCID-db85-vvr3-b7ht https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/sync-exec/GMS-2016-9.yml 38.6.0