CVE-2024-27980
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code ex…
Published: 2025-01-09 · CVSS: 8.1 · CVSS 3.0
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7