https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 19:34:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-00767 cnvd-2018-00767 https://cve.radiocsirt.org/vuln/cnvd-2018-00767 https://cve.radiocsirt.org/vuln/euvd-2026-167965 EUVD-2026-167965 https://cve.radiocsirt.org/vuln/euvd-2026-167965 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000220 <p>soyuka/pidusage &lt;=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution</p> <p>soyuka/pidusage &lt;=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000220 https://cve.radiocsirt.org/vuln/ghsa-h2p3-h48h-9jj7 <p><strong>Affected:</strong> npm: pidusage</p> <p>### Overview Affected versions of pidusage pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method.</p> <p>This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX.</p> <p>Windows and Linux are not vulnerable.</p> <p>### Proof of Concept ```js var pid = require(&#39;pidusage&#39;); pid.stat(&#39;1 &amp;&amp; /usr/local/bin/python&#39;); ```</p> <p>### Remediation Update to version 1.1.5 or later.</p> <p><strong>Affected:</strong> npm: pidusage</p> <p>### Overview Affected versions of pidusage pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method.</p> <p>This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX.</p> <p>Windows and Linux are not vulnerable.</p> <p>### Proof of Concept ```js var pid = require(&#39;pidusage&#39;); pid.stat(&#39;1 &amp;&amp; /usr/local/bin/python&#39;); ```</p> <p>### Remediation Update to version 1.1.5 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-h2p3-h48h-9jj7 https://cve.radiocsirt.org/vuln/gsd-2017-1000220 gsd-2017-1000220 https://cve.radiocsirt.org/vuln/gsd-2017-1000220