GitHub Advisoryadvisory · npm

GHSA-8gr3-2gjw-jj7g Hidden functionality in node-ipc

LOW Published 2022-03-16 Modified 2022-03-16 Official page ↗
Ecosystem
npm
Packages
node-ipc
Severity
Low
Weaknesses
CWE-912
Reviewed
2022-03-16

Affected packages

• npm node-ipc: 9.2.2 (no fix yet)

Description

The package node-ipc version 9.2.2 is vulnerable to hidden functionality that was introduced by the maintainer. The package uses a dependency that writes a file to disk that does not pertain to the functionality of the package and is not included in versions < 9.2.2.

Related

Weakness · CWE (1)

  • CWE-912 Hidden Functionality weakness

References