Releases73
Frequency1 month 2 weeks
Last Release
A Node.js module for sending notifications on native Mac, Windows (post and pre 8) and Linux (or Growl as fallback)

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
< 8.0.15.6 MEDIUM6.8 MEDIUM

This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.