Description
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user
Remediation
References
https://nodesecurity.io/advisories/336
Related Vulnerabilities
CVE-2020-7757 Vulnerability in npm package droppy
CVE-2023-40810 Vulnerability in maven package org.opencrx:opencrx-core-models
CVE-2022-45393 Vulnerability in maven package org.jenkins-ci.plugins:delete-log-plugin
CVE-2022-46166 Vulnerability in maven package de.codecentric:spring-boot-admin-server
CVE-2022-31166 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore