Lucene search

K
osvGoogleOSV:GHSA-XFXF-QW26-HR33
HistoryMay 06, 2021 - 3:55 p.m.

Arbitrary command execution in roar-pidusage

2021-05-0615:55:43
Google
osv.dev
9

EPSS

0.001

Percentile

39.3%

This affects all current versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of this package on certain operating systems, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

EPSS

0.001

Percentile

39.3%

Related for OSV:GHSA-XFXF-QW26-HR33