What the vulnerability does
01Description
The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
CVSS base score
—
Key dates
02Disclosure timeline
June 7, 2018
CVE published
September 17, 2024
Record updated
External resources
03References
Related vulnerabilities
