Description
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | windows-cpu | < 0.1.5 | 0.1.5 | GHSA-63m4-fhf2-cmf7 |
Critical · 9.8
CVE-2017-1000219
EUVD-2020-0802GHSA-63m4-fhf2-cmf7
Command Execution in windows-cpu
Published Nov 17, 2017 · Updated Sep 16, 2024 · Assigned by mitre