Launchpad.net

CVE 2018-13797

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

See the CVE page on Mitre.org for more details.