riaevangelist/node-ipc · Security
Hidden functionality in node-ipc
- GHSA ID
- GHSA-8gr3-2gjw-jj7g
- Severity
- low
- Published
- Updated
Description
The package node-ipc version 9.2.2 is vulnerable to hidden functionality that was introduced by the maintainer. The package uses a dependency that writes a file to disk that does not pertain to the functionality of the package and is not included in versions < 9.2.2.
CWEs
- CWE-912 · Hidden Functionality