description: Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitrary files when a malicious package is extracted.
problem types: Path Traversal (CWE-22)
affected:
{
product: bower
vendor: n/a
versions:
status: affected, version: Fixed in >=1.8.8
}