Lucene search

K
osvGoogleOSV:GHSA-MM4F-47CH-F7HX
HistoryApr 13, 2021 - 3:32 p.m.

Arbitrary code execution in kill-by-port

2021-04-1315:32:43
Google
osv.dev
4

0.005 Low

EPSS

Percentile

76.7%

This affects the package kill-by-port before 0.0.2. If (attacker-controlled) user input is given to the killByPort function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.

CPENameOperatorVersion
kill-by-portlt0.0.2

0.005 Low

EPSS

Percentile

76.7%

Related for OSV:GHSA-MM4F-47CH-F7HX