CVE-2021-23399

CVE-2021-23399 (wincred) affects all versions of the Node.js package wincred. The vulnerability occurs when attacker-controlled input is supplied to the getCredential function, allowing an attacker to execute arbitrary commands due to unsanitized use of the child_process.exec function. This resul...