4 matches found
CVE-2021-45459
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...
CVE-2021-45459
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...
CVE-2021-45459
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter...
CVE-2021-45459
The CVE-2021-45459 entry affects the node-windows package, specifically lib/cmd.js, where command injection is possible via the PID parameter in versions prior to 1.0.0-beta.6. Multiple connected sources (GitHub GHSA-53XV-C2HX-5W6Q, OSV, NVD entry) confirm the vulnerability in node-windows and th...