Get-process-by-name ProjectGet-process-by-name
1 matches found
CVE-2022-25644
CVE-2022-25644 affects the npm package @pendo324/get-process-by-name, with all versions vulnerable to Arbitrary Code Execution due to improper sanitization of the getProcessByName function. The root cause is mishandling of input that allows code injection, enabling remote attackers to execute arb...
9.8CVSS9.7AI score0.0122EPSS
Save