CVE-2021-23374

CVE-2021-23374 affects all versions of the Node.js package ps-visitor. The vulnerability stems from using the built-in child_process.exec in the package’s kill function without input sanitization, allowing attacker-controlled input to execute arbitrary commands. Multiple sources confirm this comm...