GHSA-qh2h-chj9-jffqCriticalCVSS 9.8

Growl before 1.10.0 vulnerable to Command Injection

Published
June 8, 2018
Last Modified
January 11, 2023

🔗 CVE IDs covered (1)

CVE-2017-16042 →

📋 Description

Affected versions of growl do not properly sanitize input prior to passing it into a shell command, allowing for arbitrary command execution.

Recommendation

Update to version 1.10.0 or later.

🎯 Affected products1

  • npm/growl:< 1.10.0

🔗 References (7)