CVE-2021-23380

CVE-2021-23380 affects all versions of roar-pidusage. The root cause is the use of child_process.exec with attacker-controlled input in the stat function on certain OSes, allowing arbitrary command execution. The vulnerability is exploitable via unsanitized input and, in published advisories, a P...