CVE-2021-23380

CVE-2021-23380 is a command injection vulnerability affecting all versions of the roar-pidusage package. It allows arbitrary command execution if attacker-controlled input is passed to the package's stat function on specific operating systems, due to unsanitized use of the child_process exec function. The vulnerability has a CVSS score of 7.3 (HIGH), indicating a network-based attack with low complexity and potential for partial impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.