Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7789
5.6
MEDIUMCVSS v3
Severity scale
010
Description
This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.
node-notifier
NPMA Node.js module for sending notifications on native Mac, Windows (post and pre 8) and Linux (or Growl as fallback)
NPMA Node.js module for sending notifications on native Mac, Windows (post and pre 8) and Linux (or Growl as fallback)< 8.0.1NVD
mikaelbr/node-notifier
GitHubA Node.js module for sending notifications on native Mac, Windows and Linux (or Growl as fallback)
GitHubA Node.js module for sending notifications on native Mac, Windows and Linux (or Growl as fallback)< 8.0.1NVD