Coffeescript Node Module (Hackerone) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-06-07. Vendor: Hackerone.

CVEs of Coffeescript Node Module

• CVE-2017-16203 - CVSS 7.5 (high), 2018-06-07: The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
• CVE-2017-16202 - CVSS 7.5 (high), 2018-06-07: The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
• CVE-2017-16205 - CVSS 7.5 (high), 2018-06-07: The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.