Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-16460 EUVD-2018-0452GHSA-cfhg-9x44-78h2

ps Enables OS Command Injection

Published Sep 7, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Vendor: https://github.com/UmbraEngineering Product: ps Package: ps Ecosystem: npm

Description

A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.

Affected products

VendorProductAffectedFixed
https://github.com/UmbraEngineering ps 1.0.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm ps < 1.0.0 1.0.0 GHSA-cfhg-9x44-78h2

References