PatchTheCVEbower vulnerabilities and fixes
Recent CVEs affecting bower, with upgrade or downgrade steps. 1 tracked.
bower has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-09-13. Highest priority: CVE-2019-5484 (score 58/100).
- CVE-2019-5484 HIGH 7.5 UPGRADE Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install
FAQ
How do I fix bower vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bower being exploited right now?
None of the tracked bower CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bower CVE should I patch first?
CVE-2019-5484 currently ranks highest (58/100): Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install.