{"items":[{"id":"CVE-2016-10538","published":"2018-05-31T20:00:00.000Z","updated":"2024-09-17T01:36:47.221Z","title":"The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any…","severity":"LOW","score":3.5,"vendor":"HackerOne","product":"cli node module","kev":false,"epss":0.00977,"kevAdded":null,"exploit":false}]}