What is GHSA-4rv9-5vc4-88cg?

GHSA-4rv9-5vc4-88cg is a security advisory published by GitHub Security Advisories with Critical severity. Command injection in node-ps

Which CVE IDs does GHSA-4rv9-5vc4-88cg cover?

GHSA-4rv9-5vc4-88cg covers the following CVE IDs: CVE-2020-7785. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4rv9-5vc4-88cg?

GHSA-4rv9-5vc4-88cg has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-4rv9-5vc4-88cg?

GHSA-4rv9-5vc4-88cg affects 1 product, including: npm/node-ps:\u003c= 0.0.2.

GHSA-4rv9-5vc4-88cgCriticalCVSS 9.8

Command injection in node-ps

Vendor

GitHub Security Advisories

Published

March 19, 2021

Last Modified

September 5, 2023

🔗 CVE IDs covered (1)

CVE-2020-7785 →

📋 Description

This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js.

🎯 Affected products1

npm/node-ps:<= 0.0.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-7785
https://snyk.io/vuln/SNYK-JS-NODEPS-1048335
https://www.npmjs.com/package/node-ps
https://github.com/fortruce/node-ps/blob/master/lib/index.js#L72
https://github.com/advisories/GHSA-4rv9-5vc4-88cg