CVE-2021-23380

This affects all versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of this package on certain operating systems, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

• CWE-78

• https://github.com/Svjard/pidusage/blob/772cd2bd675ff7b1244b6fe3d7541692b1b9e42c/lib/stats.js%23L103Broken Link
• https://snyk.io/vuln/SNYK-JS-ROARPIDUSAGE-1078528Exploit, Third Party Advisory
• https://github.com/Svjard/pidusage/blob/772cd2bd675ff7b1244b6fe3d7541692b1b9e42c/lib/stats.js%23L103Broken Link
• https://snyk.io/vuln/SNYK-JS-ROARPIDUSAGE-1078528Exploit, Third Party Advisory

Published

Apr 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23375This affects all versions of package psnode. If attacker-con…9.8
• CVE-2021-23376This affects all versions of package ffmpegdotjs. If attacke…9.8
• CVE-2021-23377This affects all versions of package onion-oled-js. If attac…9.8
• CVE-2021-23378This affects all versions of package picotts. If attacker-co…9.8
• CVE-2021-23379This affects all versions of package portkiller. If (attacke…9.8
• CVE-2021-2338Vulnerability in the Siebel Apps - Marketing product of Orac…6.1
• CVE-2021-23381This affects all versions of package killing. If attacker-co…9.8
• CVE-2021-23382The package postcss before 8.2.13 are vulnerable to Regular …7.5
• CVE-2021-23383The package handlebars before 4.7.7 are vulnerable to Protot…9.8
• CVE-2021-23384The package koa-remove-trailing-slashes before 2.0.2 are vul…5.4
• CVE-2021-23385This affects all versions of package Flask-Security. When us…6.1
• CVE-2021-23386This affects the package dns-packet before 5.2.2. It creates…6.5