Critical severity9.8NVD Advisory· Published Feb 24, 2020· Updated Jun 17, 2026

CVE-2019-10796

Description

rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
rpinpm	<= 0.0.3	—

Affected products

rpi/rpidescription
ghsa-coords
pkg:npm/rpi
Range: <= 0.0.3
Rpi Project/Rpi
cpe:2.3:a:rpi_project:rpi:*:*:*:*:*:node.js:*:*
Range: <=0.0.3

Patches

Vulnerability mechanics

References

github.com/xseignard/rpi/blob/master/src/lib/gpio.jsnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-vf26-7gjf-f92rghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-10796ghsaADVISORY
snyk.io/vuln/SNYK-JS-RPI-548942nvdThird Party AdvisoryWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000