Detections
Analytics
CVE-2017-16042
critical
Description
Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.
References
https://nodesecurity.io/advisories/146