Skip to content
OpenAdvisories

Package · npm

pidusage

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical —
    CVE-2017-16034

    Command Injection in pidusage

    Affected versions of `pidusage` pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. ## Pro…

    pidusage npm
  • Critical 9.8
    CVE-2017-1000220

    PIDUsage Enables OS Command Injection

    soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution

    pidusage npm