What is GHSA-cv76-rv4h-4mqc?

GHSA-cv76-rv4h-4mqc is a security advisory published by GitHub Security Advisories with High severity. OS Command Injection in proctree

Which CVE IDs does GHSA-cv76-rv4h-4mqc cover?

GHSA-cv76-rv4h-4mqc covers the following CVE IDs: CVE-2021-34082. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-cv76-rv4h-4mqc?

GHSA-cv76-rv4h-4mqc affects 1 product, including: npm/proctree:\u003c= 0.1.1.

GHSA-cv76-rv4h-4mqcHigh

OS Command Injection in proctree

Vendor

GitHub Security Advisories

Published

June 3, 2022

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2021-34082 →

📋 Description

OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function.

🎯 Affected products1

npm/proctree:<= 0.1.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-34082
https://advisory.checkmarx.net/advisory/CX-2021-4783
https://github.com/allenhwkim/proctree/blob/master/index.js#L46
https://github.com/advisories/GHSA-cv76-rv4h-4mqc