← All advisories

Critical severity9.8NVD Advisory· Published Nov 17, 2017· Updated Jun 17, 2026

CVE-2017-1000219

CVE-2017-1000219

Description

npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
windows-cpunpm	< 0.1.5	0.1.5

Affected products

3

Windows Cpu Project/Windows CPU2 versions
cpe:2.3:a:windows-cpu_project:windows-cpu:0.1.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:windows-cpu_project:windows-cpu:0.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:windows-cpu_project:windows-cpu:0.1.2:*:*:*:*:*:*:*
ghsa-coords
pkg:npm/windows-cpu
Range: < 0.1.5

Patches

Vulnerability mechanics

References

6

nodesecurity.io/advisories/336nvdExploitMitigationThird Party Advisory
github.com/advisories/GHSA-63m4-fhf2-cmf7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-1000219ghsaADVISORY
github.com/KyleRoss/windows-cpu/blob/master/index.jsghsaWEB
github.com/KyleRoss/windows-cpu/commit/b75e19aa2f7459a9506bceb577ba2341fe273117ghsaWEB
www.npmjs.com/advisories/336ghsaWEB

News mentions

0

No linked articles in our index yet.