high7.5
CVE-2017-16202
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Impact
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cofeescript Project | Cofeescript | Version 0.0.1 |