gf_playwright (=1.0.0) potentially affected by CVE-2017-16067 via node-opencv (=0.0.2-security)

node-opencv NPM version =0.0.2-security is affected by a known vulnerability. The following packages have a transitive dependency on node-opencv and may be impacted: - gfplaywright =1.0.0 Source cves: CVE-2017-16067 Source advisory: OSV:GHSA-4X37-5RH2-HP8C...

CVE-2017-16067

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...