GHSA-5fw9-fq32-wv5pMediumCVSS 5.6

OS Command Injection in node-notifier

Published
December 21, 2020
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2020-7789 →

📋 Description

This affects the package node-notifier before 8.0.1. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.

🎯 Affected products1

  • npm/node-notifier:< 8.0.1

🔗 References (6)