12g (>=0.0.15, <=1.0.1), 12g-env-template (>=1.0.4, <=1.0.6) +7233 more potentially affected by CVE-2017-16042 via growl (>=1.0.2, <=1.9.2)

growl NPM version =1.0.2, =0.0.15, =1.0.4, =1.1.8, =1.0.0, =0.1.0, =0.0.97, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.1.3 - @51npm/freedom-cli 1.0.0 and more Source cves: CVE-2017-16042 Source advisory: OSV:GHSA-QH2H-CHJ9-JFFQ...

CVE-2017-16042

Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution...

CVE-2017-16042

The CVE-2017-16042 entry concerns Growl for Node.js. Affected: growl prior to version 1.10.2. Root cause: input is not properly sanitized before being passed to exec, enabling arbitrary command execution. Impact: remote command execution via crafted input in the Growl integration for nodejs. Expl...