CVE-2017-1000219

npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user

• CWE-78

• https://nodesecurity.io/advisories/336Exploit, Mitigation, Third Party Advisory
• https://nodesecurity.io/advisories/336Exploit, Mitigation, Third Party Advisory

Published

Nov 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000213WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff…
• CVE-2017-1000214GitPHP by xiphux is vulnerable to OS Command Injections
• CVE-2017-1000215ROOT xrootd version 4.6.0 and below is vulnerable to an unau…
• CVE-2017-1000216Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000217Opencast 2.3.2 and older versions are vulnerable to script i…
• CVE-2017-1000218LightFTP version 1.1 is vulnerable to a buffer overflow in t…
• CVE-2017-1000220soyuka/pidusage <=1.1.4 is vulnerable to command injection i…
• CVE-2017-1000221In Opencast 2.2.3 and older if user names overlap, the Openc…
• CVE-2017-1000222Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000223A stored web content injection vulnerability (WCI, a.k.a XSS…
• CVE-2017-1000224CSRF in YouTube (WordPress plugin) could allow unauthenticat…
• CVE-2017-1000225Reflected XSS in Relevanssi Premium version 1.14.8 when usin…