This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| node-notifier(npm) | 0 | 8.0.1 | N/A |
CVSS Metrics
