Description
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user
Remediation
References
https://nodesecurity.io/advisories/336
Related Vulnerabilities
CVE-2021-3664 Vulnerability in npm package url-parse
CVE-2020-7743 Vulnerability in maven package org.webjars:mathjs
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-paste-from-office
CVE-2022-36096 Vulnerability in maven package org.xwiki.platform:xwiki-platform-index-ui
CVE-2023-30527 Vulnerability in maven package org.jenkins-ci.plugins:wso2id-oauth