high7.5
CVE-2017-16205
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Impact
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coffescript Project | Coffescript | Version 1.0.1 |