LOW
GHSA-v45m-2wcp-gg98
Global node_modules Binary Overwrite in bin-links
Quick fix
GHSA-v45m-2wcp-gg98 — bin-links: upgrade to the fixed version with the command below.
npm install bin-links@1.1.6Details
Versions of `bin-links` prior to 1.1.6 are vulnerable to a Global node_modules Binary Overwrite. It fails to prevent globally-installed binaries to be overwritten by other package installs. For example, if a package was installed globally and created a `serve` binary, any subsequent installs of packages that also create a `serve` binary would overwrite the first binary. This behavior is still allowed in local installations.
## Recommendation
Upgrade to version 1.1.6 or later.
Are you affected?
Enter the version of the package you're using.