CVE-2017-16042

Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt