CVE-2017-1000219

Critical

Published: 17/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

All versions of windows-cpu by KyleRoss are vulnerable to command injection, which can lead to code execution as the Node.js user.

Exploitation of this vulnerability could allow attackers to execute code remotely, posing a serious security threat to the system.

It is recommended to update to the latest version of windows-cpu to mitigate this vulnerability.

Original NVD description (English source)

npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user