nfpm vulnerabilities

1 known vulnerability in nfpm from Goreleaser. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  nfpm: Incorrect Default Permissions

  CVE-2023-32698May 30, 2023Goreleaser

  nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged the files (without extra config for enforcing it’s own permissions) files could go out with bad permissions (chmod 666 or 777). Anyone us