Description
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | node-windows | < 1.0.0-beta.6 | 1.0.0-beta.6 | GHSA-53xv-c2hx-5w6q |