CVE-2020-7789

CVE-2020-7789 affects the package node-notifier prior to 9.0.0. The flaw allows an attacker to run arbitrary commands on Linux machines because the options params are not sanitised when passed as an array. Remediation: upgrade node-notifier to a fixed version (9.0.0 or newer). The connected docum...