printer does not sanitize command arguments properly in the
printDirect() function. If untrusted client input is passed in, command injection is possible.
Source: Node Security Project
Upgrade to version > 0.0.1 which is available on github at https://github.com/tojocky/node-printer
Special thanks to Wes Cruver for providing a pull request!
Snyk patch available for versions:
- <= 0.0.1