Most recent entries from all

cnvd-2018-00767

2026-10-23T19:34:14.980060+00:00

cnvd-2018-00767

EUVD-2026-167965

2026-10-23T19:34:14.980099+00:00

EUVD-2026-167965

fkie_cve-2017-1000220

2026-10-23T19:34:14.980113+00:00

soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution

GHSA-h2p3-h48h-9jj7 — PIDUsage Enables OS Command Injection

2026-10-23T19:34:14.980144+00:00

Affected: npm: pidusage

### Overview Affected versions of pidusage pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method.

This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX.

Windows and Linux are not vulnerable.

### Proof of Concept ```js var pid = require('pidusage'); pid.stat('1 && /usr/local/bin/python'); ```

### Remediation Update to version 1.1.5 or later.

gsd-2017-1000220

2026-10-23T19:34:14.980171+00:00

gsd-2017-1000220