GHSA-3mpp-xfvh-qh37: 
JavaScript vulnerability analysis and mitigation

The node-ipc package versions 11.0.0 to 12.0.0 contained a behavior change that involved writing messages to users' desktops. This vulnerability was identified and tracked as GHSA-3mpp-xfvh-qh37, with a low severity rating. The issue was published to the GitHub Advisory Database on March 16, 2022, and was last updated on August 14, 2024 (GitHub Advisory).

The vulnerability affects node-ipc package versions greater than or equal to 11.0.0 and less than 12.0.0. The issue was classified with a low severity rating, and notably, no Common Weakness Enumeration (CWE) or CVE ID was assigned to this vulnerability (GitHub Advisory).

The impact of this vulnerability involved unexpected behavior where the package would write maintainer messages to the user's desktop, potentially affecting system integrity and user experience (GitHub Advisory).

The vulnerability has been patched in version 12.0.0 of node-ipc. Users are advised to upgrade to this version to resolve the issue. The update includes security improvements and removes the problematic behavior (Node IPC Commit).