github_osv/GHSA-m5ch-gx8g-rg73
Remote Code Execution in pomelo-monitor
All versions of `pomelo-monitor` are vulnerable to Remote Code Execution. Due to insufficient input validation an attacker could run arbitrary commands on the server thus rendering the package vulnerable to Remote Code Execution.
## Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
gitlab/npm/pomelo-monitor/GMS-2020-759
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in pomelo-monitor.