Time-of-check Time-of-use (TOCTOU) Race Condition
A TOCTOU issue in the chownr package for Node.js could allow a local attacker to trick it into descending into unintended directories via symlink attacks.
Advisories for Npm/Chownr package
2020
A TOCTOU issue in the chownr package for Node.js could allow a local attacker to trick it into descending into unintended directories via symlink attacks.