Description
soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | pidusage | < 1.1.5 | 1.1.5 | GHSA-h2p3-h48h-9jj7 |
Critical · 9.8
CVE-2017-1000220
EUVD-2022-4045GHSA-h2p3-h48h-9jj7
PIDUsage Enables OS Command Injection
Published Nov 17, 2017 · Updated Sep 16, 2024 · Assigned by mitre