fix: advisory detail in 2019-dec sec release (#2839)

* fix: advisory detail in 2019-dec sec release

slight clarification to the advisory 1434 text

* over write -> overwrite

Author: ahmadnassri

locale/en/blog/vulnerability/december-2019-security-releases.md

@@ -35,7 +35,7 @@ This behavior is still possible through install scripts. This vulnerability bypa
 
 ### Arbitrary File Write
 
-Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended `node_modules` folder through the `bin` field. A properly constructed entry in the package.json `bin` field would allow a package publisher to modify and/or gain access to arbitrary files on a user’s system when the package is installed. It is only possible to affect files that the user running `npm install` has access to.
+Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended `node_modules` folder through the `bin` field. A properly constructed entry in the `package.json` bin field would allow a package publisher to create files on a user's system when the package is installed. It is only possible to affect files that the user running `npm install` has access to and it is not possible to overwrite files that already exist on disk.
 
 This behavior is still possible through install scripts. This vulnerability bypasses a user using the `--ignore-scripts` install option.