~ / search / GHSA-xp4x-j9vh-c3wf

GHSA-xp4x-j9vh-c3wf

OS Command Injection and Command Injection in kill-port-process

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-15609

Packages

EcosystemPackageAffectedFixed in
npm kill-port-process < 2.2.0 2.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

The kill-port-process package prior to version 2.2.0 is vulnerable to a Command Injection.

References

External links from the advisory. They lead to third-party sites.