Description
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.
Remediation
References
https://github.com/coreybutler/node-windows/compare/1.0.0-beta.5...1.0.0-beta.6
https://github.com/dwisiswant0/advisory/issues/4
https://security.netapp.com/advisory/ntap-20220107-0004/
Related Vulnerabilities
CVE-2018-20676 Vulnerability in maven package org.webjars.bower:bootstrap-sass
CVE-2016-10735 Vulnerability in maven package org.webjars:bootstrap
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2022-25863 Vulnerability in npm package gatsby-plugin-mdx
CVE-2020-10673 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind