4 matches found
CVE-2021-45459
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...
9.8CVSS5.8AI score
SaveExploits0References3
CVE-2021-45459
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...
9.8CVSS0.04063EPSS
SaveExploits1References3
CVE-2021-45459
The CVE-2021-45459 entry affects the node-windows package, specifically lib/cmd.js, where command injection is possible via the PID parameter in versions prior to 1.0.0-beta.6. Multiple connected sources (GitHub GHSA-53XV-C2HX-5W6Q, OSV, NVD entry) confirm the vulnerability in node-windows and th...
9.8CVSS9.7AI score0.04063EPSS
SaveExploits1References3Affected Software1
20