CVE-2017-16042

CVE-2017-16042 is a critical command injection vulnerability affecting the growl_project growl Node.js module prior to version 1.10.2. This flaw allows for arbitrary command execution due to improper input sanitization before passing data to the exec function. With a CVSS score of 9.8, it presents a high risk as it can be exploited remotely without authentication or user interaction, leading to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.