critical9.8
CVE-2018-16460
A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.
Impact
A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Umbraengineering | Ps | before 1.0.0 |