Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-25644 EUVD-2022-6607GHSA-qhxv-296x-hjv7

Arbitrary Code Execution

Published Aug 29, 2022 · Updated Sep 17, 2024 · Assigned by snyk

Description

All versions of package @pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution due to improper sanitization of getProcessByName function.

Affected products

VendorProductAffectedFixed
— @pendo324/get-process-by-name < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm @pendo324/get-process-by-name all versions — GHSA-qhxv-296x-hjv7

References