VDB
DEBIAN-CVE-2020-15095
DEBIAN-CVE-2020-15095
PUBLISHED
CVSS 4.400000095367432 MEDIUM
Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>". The password value is not redacted and is printed to stdout and also to any generated log files.
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | npm | 0, 0, 0 |
| Debian:12 | npm | 0, 0, 0 |
| Debian:11 | npm | 0, 0, 0 |
| Debian:13 | npm | 0, 0, 0 |
Timeline
- Jul 7, 2020 CVE Published
- Apr 28, 2026 CVE Updated