Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-16262
7.8
HIGHCVSS v3
Published
October 28, 2020
CVSS v2
7.2 HIGH
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation.
NPM
GitHub