blackbaud / skyux-sdk-builder

SKY UX Builder builds the output for SKY UX applications and handles configuration details. It provides for a rapid development process with minimal setup for developers to create single-page applications.
https://developer.blackbaud.com/skyux
MIT License
2 stars 15 forks source link

Vulnerability in node-notifier #341

Closed justineshaw closed 3 years ago

justineshaw commented 3 years ago

There's a vulnerability in node-notifier, which karma-notify-reporter is dependent on. Updating to karma-notify-reporter 1.3.0 will hopefully fix the issue.

This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.

See whitesource for more info (link).