npm/growl CVE-2017-16042: critical 9.8, EPSS 4.58%

Growl before 1.10.0 vulnerable to Command Injection

Action: Upgrade growl to 1.10.0 or later.

npm i growl@1.10.0

Affected

Fixed versions

Sources

• osv: GHSA-qh2h-chj9-jffq
• https://nvd.nist.gov/vuln/detail/CVE-2017-16042
• https://github.com/tj/node-growl/issues/60
• https://github.com/tj/node-growl/pull/61
• https://github.com/tj/node-growl/pull/62
• https://github.com/tj/node-growl/commit/d71177d5331c9de4658aca62e0ac921f178b0669
• https://github.com/tj/node-growl
• https://www.npmjs.com/advisories/146

CVE-2017-16042 · published 2018-06-08T12:43:43Z · modified 2023-11-08T03:59:01.241655Z · JSON