What the vulnerability does
01Description
The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.
CVSS base score
—
Key dates
02Disclosure timeline
June 7, 2018
CVE published
September 16, 2024
Record updated
External resources
03References
Related vulnerabilities
