Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44547.json"