Search for packages
| purl | pkg:npm/pidusage@1.1.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5mrz-3b9x-bue3 | Command Injection The pidusage module passes unsanitized input to child_process.exec, resulting in command injection in the ps method, as the pid is never cast to an integer as the comment expects. This module is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. |
GMS-2017-137
|
| VCID-hv35-hwj2-x3h9 | Command Injection in pidusage |
CVE-2017-16034
GHSA-hfq9-rfpv-j8r8 GMS-2020-757 |
| VCID-pn7m-uesu-mqcf | PIDUsage Enables OS Command Injection |
CVE-2017-1000220
GHSA-h2p3-h48h-9jj7 |