What is GHSA-3mpp-xfvh-qh37?

GHSA-3mpp-xfvh-qh37 is a security advisory published by GitHub Security Advisories with Low severity. node-ipc behavior change

Why does GHSA-3mpp-xfvh-qh37 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-3mpp-xfvh-qh37?

GHSA-3mpp-xfvh-qh37 affects 1 product, including: npm/node-ipc:\u003e= 11.0.0, \u003c 12.0.0.

GHSA-3mpp-xfvh-qh37LowDisclosed before NVD

node-ipc behavior change

Vendor

GitHub Security Advisories

Published

March 16, 2022

Last Modified

August 14, 2024

📋 Description

node-ipc starting in version 11.0.0 and prior to version 12.0.0 includes a message from the maintainer that is written to the user’s desktop. Please review the version changes before proceeding.

🎯 Affected products1

npm/node-ipc:>= 11.0.0, < 12.0.0

🔗 References (4)

https://github.com/RIAEvangelist/node-ipc/releases/tag/v11.0.0
https://github.com/RIAEvangelist/node-ipc/commit/a98efaedbf090d7bf4d6bdf07761301c531608af
https://github.com/RIAEvangelist/node-ipc/compare/10.1.0...12.0.0
https://github.com/advisories/GHSA-3mpp-xfvh-qh37