Product

npm node-windows vulnerabilities

1 published CVE affecting npm node-windows, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest npm node-windows CVEs

Newest publication first

CVE-2021-45459 Command Injection in node-windows
Published 2021-12-22

CriticalCVSS 9.8 EPSS 4.1%

lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

npm node-windows vulnerabilities

Latest npm node-windows CVEs

CVE-2021-45459 Command Injection in node-windows