npm cli
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-0775 | 10.9.0 | npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability | HIGH 7.0 | 0.3 % | ||
| CVE-2020-15095 | < 6.14.6 | Sensitive information exposure through logs in npm cli | MEDIUM 4.4 | 0.4 % | ||
| CVE-2019-16777 | < 6.13.4 – < 6.13.4 | Arbitrary File Overwrite in npm CLI | HIGH 7.7 | 2.1 % | ||
| CVE-2019-16776 | < 6.13.3 – < 6.13.3 | Unauthorized File Access in npm CLI before before version 6.13.3 | HIGH 8.1 | 3.4 % | ||
| CVE-2019-16775 | < 6.13.3 – < 6.13.3 | Unauthorized File Access in npm CLI before before version 6.13.3 | HIGH 7.7 | 3.3 % |