~ / search / GHSA-5wqj-f379-6jh4

GHSA-5wqj-f379-6jh4

Command injection in kill-process-on-port

Source: GitHub Advisory Database (reviewed) High CVE-2020-28426

Packages

EcosystemPackageAffectedFixed in
npm kill-process-on-port <= 1.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId.

References

External links from the advisory. They lead to third-party sites.