| Package | Affected versions | Patched versions |
|---|---|---|
| tin | = 1.40 |
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free