Node-windows Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Node-windows Project records in CISA KEV

No Node-windows Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Node-windows · all components

TI-2021-20546 CVE-2021-45459 · GHSA-53xv-c2hx-5w6q

MEDIUM 49

lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04062 Published 2021-12-22 Fixed in 1.0.0-beta.6 CWE-77