npm›network-manager›CVE-2019-107869.8 CRITICALImproper Input Validationnetwork-manager allows remote attackers to execute arbitrary commands via the execSync() argument.