search

shime / play-sound

Play sounds by shelling out to one of the available audio players.
MIT License
208 stars 31 forks source link

npm moderate vulnerability: Tmp files readable by other users #28

Closed alexbjorlig closed 5 years ago

alexbjorlig commented 5 years ago

Play-sound depends on find-exec, and find-exec has a vulnerability. More info here https://nodesecurity.io/advisories/310, or run npm audit

shime commented 5 years ago

Thanks for reporting. I'll try to find a solution for https://github.com/shime/find-exec/pull/3 and https://github.com/shime/find-exec/issues/2 soon.