nodejs-npm-tokens-leak-march-2016: npm security updates v2.15.1 and v3.8.3
Published Mar 31, 2016
·Updated
Affected Software
1 affected component
npm npm=2.15.1, =3.8.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.15.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.8.3
Event History
Mar 31, 2016
Advisory Published
via Node.js·10:41 AM
Data Sourced
via Node.js·10:41 AM
Description
Frequently Asked Questions
1
Which npm releases address this issue?
The security updates are npm v2.15.1 and npm v3.8.3.
2
When was this security update published?
It was published on 2016-03-31.