Description
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user
Remediation
References
https://nodesecurity.io/advisories/336
Related Vulnerabilities
CVE-2020-21485 Vulnerability in maven package org.alluxio:alluxio-parent
CVE-2020-8178 Vulnerability in npm package jison
CVE-2023-40827 Vulnerability in maven package org.pf4j:pf4j
CVE-2022-41254 Vulnerability in maven package org.jenkins-ci.plugins:cons3rt
CVE-2022-4348 Vulnerability in maven package com.ruoyi:ruoyi-common