https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 04:30:30 +0000 https://db.gcve.eu/vuln/ghsa-hfq9-rfpv-j8r8 <p><strong>Affected:</strong> npm: pidusage</p> <p>Affected versions of `pidusage` pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX.</p> <p>Windows and Linux are not vulnerable.</p> <p>## Proof of Concept ``` var pid = require(&#39;pidusage&#39;); pid.stat(&#39;1 &amp;&amp; /usr/local/bin/python&#39;); ```</p> <p>## Recommendation</p> <p>Update to version 1.1.5 or later.</p> <p><strong>Affected:</strong> npm: pidusage</p> <p>Affected versions of `pidusage` pass unsanitized input to `child_process.exec()`, resulting in arbitrary code execution in the `ps` method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX.</p> <p>Windows and Linux are not vulnerable.</p> <p>## Proof of Concept ``` var pid = require(&#39;pidusage&#39;); pid.stat(&#39;1 &amp;&amp; /usr/local/bin/python&#39;); ```</p> <p>## Recommendation</p> <p>Update to version 1.1.5 or later.</p> https://db.gcve.eu/vuln/ghsa-hfq9-rfpv-j8r8 https://db.gcve.eu/vuln/gsd-2017-16034 gsd-2017-16034 https://db.gcve.eu/vuln/gsd-2017-16034