{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "node-ipc"
      },
      "versions": [
        "9.2.2"
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-912"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2022-03-16T23:54:33Z",
    "nvd_published_at": null,
    "severity": "LOW"
  },
  "details": "The package node-ipc version 9.2.2 is vulnerable to hidden functionality that was introduced by the maintainer. The package uses a dependency that writes a file to disk that does not pertain to the functionality of the package and is not included in versions \u003c 9.2.2.",
  "id": "GHSA-8gr3-2gjw-jj7g",
  "modified": "2022-03-16T23:54:33Z",
  "published": "2022-03-16T23:54:33Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://github.com/RIAEvangelist/node-ipc"
    },
    {
      "type": "WEB",
      "url": "https://github.com/RIAEvangelist/node-ipc/releases/tag/9.2.2"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Hidden functionality in node-ipc"
}