https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T08:13:13.320981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-37827 cnvd-2017-37827 2026-10-28T08:13:13.395245+00:00 cnvd-2017-37827 https://cve.radiocsirt.org/vuln/euvd-2026-170961 EUVD-2026-170961 2026-10-28T08:13:13.395281+00:00 EUVD-2026-170961 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000219 fkie_cve-2017-1000219 2026-10-28T08:13:13.395296+00:00

npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user

 https://cve.radiocsirt.org/vuln/ghsa-63m4-fhf2-cmf7 GHSA-63m4-fhf2-cmf7 — Command Execution in windows-cpu 2026-10-28T08:13:13.395323+00:00

Affected: npm: windows-cpu

Version of `windows-cpu` before 0.1.5 will execute arbitrary code passed into the first argument of the `findLoad` method, resulting in remote code execution.

## Proof of Concept

```js var win = require('windows-cpu'); wind.findLoad('foo & calc.exe'); ```

## Recommendation

Update to version 0.1.5 or later.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000219 gsd-2017-1000219 2026-10-28T08:13:13.395352+00:00 gsd-2017-1000219