Lucene search

K
osvGoogleOSV:GHSA-QC65-CGVR-93P6
HistoryMar 19, 2021 - 9:19 p.m.

Code injection in kill-process-by-name

2021-03-1921:19:18
Google
osv.dev
5
code injection
package vulnerability
input sanitization
child process exec

EPSS

0.005

Percentile

75.5%

This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in the index.js file.

EPSS

0.005

Percentile

75.5%

Related for OSV:GHSA-QC65-CGVR-93P6