LOW
GHSA-gqf6-75v8-vr26
Arbitrary File Write in bin-links
Quick fix
GHSA-gqf6-75v8-vr26 — bin-links: upgrade to the fixed version with the command below.
npm install bin-links@1.1.5Details
Versions of `bin-links` prior to 1.1.5 are vulnerable to an Arbitrary File Write. The package fails to restrict access to folders outside of the intended `node_modules` folder through the `bin` field. This allows attackers to create arbitrary files in the system. Note it is not possible to overwrite files that already exist.
## Recommendation
Upgrade to version 1.1.5 or later.
Are you affected?
Enter the version of the package you're using.