VulnerableCode Package Details - pkg:npm/sync-exec@0.6.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-49xf-215m-9ub5 Aliases: CVE-2017-16024 GHSA-38h8-x697-gh8q	Information Exposure The sync-exec module is used to simulate `child_process` Sync-exec uses `tmp` directories as a buffer before returning values. Other users on the server have read access to the `tmp` directory, possibly allowing an attacker on the server to obtain confidential information from the `buffer/tmp` file, while it exists.	There are no reported fixed by versions.
VCID-ydbd-973n-fkaa Aliases: GMS-2016-9	Tmp files readable by other users The sync-exec module is used to simulate child_process.execSync in node Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the server to obtain confidential information from the buffer/tmp file, while it exists.	There are no reported fixed by versions.

Vulnerability

Summary

Fixed by

VCID-49xf-215m-9ub5
Aliases:
CVE-2017-16024
GHSA-38h8-x697-gh8q

Information Exposure The sync-exec module is used to simulate `child_process` Sync-exec uses `tmp` directories as a buffer before returning values. Other users on the server have read access to the `tmp` directory, possibly allowing an attacker on the server to obtain confidential information from the `buffer/tmp` file, while it exists.

There are no reported fixed by versions.

VCID-ydbd-973n-fkaa
Aliases:
GMS-2016-9

Tmp files readable by other users The sync-exec module is used to simulate child_process.execSync in node Sync-exec uses tmp directories as a buffer before returning values. Other users on the server have read access to the tmp directory, possibly allowing an attacker on the server to obtain confidential information from the buffer/tmp file, while it exists.

There are no reported fixed by versions.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-06T23:16:10.563776+00:00	GHSA Importer	Affected by	VCID-49xf-215m-9ub5	https://github.com/advisories/GHSA-38h8-x697-gh8q	38.6.0
2026-06-04T20:12:33.425506+00:00	GitLab Importer	Affected by	VCID-49xf-215m-9ub5	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/sync-exec/CVE-2017-16024.yml	38.6.0
2026-06-04T20:05:27.878071+00:00	GitLab Importer	Affected by	VCID-ydbd-973n-fkaa	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/sync-exec/GMS-2016-9.yml	38.6.0