node-notifier

npm1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting node-notifierpage 1 of 1

CVE-2020-7789MEDIUMCVSS 5.6EG 5.6✓ Fixed in 8.0.1
2020-12-11
This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.

Check whether node-notifier is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for node-notifier CVEs against the assets you own.

Start Free Scan →