Search vulnerabilities

Results 1

Export CSV
CVE-2017-16042

nodejs-growl: Does not properly sanitize input before passing it to exec

Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Products