OSV 1.4.0 · github-reviewed · 修改于 2022-07-06 02:00
发布时间
2021-05-08 00:06
GitHub 审查时间
2021-05-07 06:31
NVD 发布时间
2021-04-19 03:15
源文件
advisories/github-reviewed/2021/05/GHSA-v2jv-33gh-xx29/GHSA-v2jv-33gh-xx29.json
This affects all versions up to and including version 0.0.2 of package ps-visitor. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.