| Package | Affected versions | Patched versions |
|---|---|---|
| windows-cpu | = 0.1.1= 0.1.2 | |
| windows-cpu | < 0.1.5 | 0.1.5 |
Version of windows-cpu before 0.1.5 will execute arbitrary code passed into the first argument of the findLoad method, resulting in remote code execution.
var win = require('windows-cpu');
wind.findLoad('foo & calc.exe');
Update to version 0.1.5 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free