Description
A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.
Remediation
References
https://hackerone.com/reports/390848
Related Vulnerabilities
CVE-2017-16125 Vulnerability in npm package rtcmulticonnection-client
CVE-2020-36632 Vulnerability in npm package flat
CVE-2018-1002204 Vulnerability in maven package org.webjars:adm-zip
CVE-2012-4449 Vulnerability in maven package org.apache.hadoop:hadoop-common
CVE-2019-9155 Vulnerability in maven package org.webjars.npm:openpgp