lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.
- https://github.com/dwisiswant0/advisory/issues/4
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ChamalBandara/CVEs