Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package chownr, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (1)
CVE-2017-18869 — CVSS 2.5 (low): A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into…