Security Advisory
CVE-2020-15095
4.4
MEDIUM
Vulnerability Description
Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "://[[:]@][:][:][/]". The password value is not redacted and is printed to stdout and also to any generated log files.
Published Date
July 7, 2020
Official Source
NIST NVD Advisory