[{"CVE":"CVE-2020-15095","severity":"moderate","public_date":"2020-07-07T00:00:00Z","advisories":["RHSA-2020:4272"],"bugzilla":"1856875","bugzilla_description":"CVE-2020-15095 npm: Sensitive information exposure through logs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-532","affected_packages":["nodejs:12-8020020201007080935.4cda2c84"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15095.json","cvss3_scoring_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","cvss3_score":"4.4"},{"CVE":"CVE-2019-16777","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788301","bugzilla_description":"CVE-2019-16777 npm: Global node_modules Binary Overwrite","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16777.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16775","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788305","bugzilla_description":"CVE-2019-16775 npm: Symlink reference outside of node_modules folder through the bin field upon installation","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16775.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-16776","severity":"low","public_date":"2019-12-12T00:00:00Z","advisories":["RHSA-2020:0573","RHSA-2020:0597","RHSA-2020:0602","RHEA-2020:0330","RHSA-2020:2625","RHSA-2020:0579"],"bugzilla":"1788310","bugzilla_description":"CVE-2019-16776 npm: Arbitrary file write via constructed entry in the package.json bin field","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-20","affected_packages":["rh-nodejs12-nodejs-0:12.16.1-1.el7","rh-nodejs10-nodejs-0:10.19.0-1.el7","nodejs:10-8010020200213140254.c27ad7f8","rh-nodejs8-nodejs-0:8.17.0-2.el7","nodejs:12-8010020200116150415.c27ad7f8","nodejs:10-8000020200214110450.f8e95b4e"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-16776.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","cvss3_score":"4.8"},{"CVE":"CVE-2019-10196","severity":"moderate","public_date":"2018-04-05T00:00:00Z","advisories":[],"bugzilla":"1567245","bugzilla_description":"CVE-2019-10196 nodejs-http-proxy-agent: Denial of Service and data leak due to improper buffer sanitization","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-665","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2016-3956","severity":"moderate","public_date":"2016-03-31T00:00:00Z","advisories":[],"bugzilla":"1328413","bugzilla_description":"CVE-2016-3956 npm: bearer token leak to non-registry hosts","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-201","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3956.json"},{"CVE":"CVE-2013-4116","severity":"low","public_date":"2013-07-08T00:00:00Z","advisories":[],"bugzilla":"983917","bugzilla_description":"CVE-2013-4116 npm: Insecure temporary directory generation","cvss_score":1.9,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4116.json"}]