CVE-2020-28426

Summary: CVE-2020-28426 affects the npm package kill-process-on-port. All versions are vulnerable to Command Injection through the a.getProcessPortId function. Concrete details across sources include exploit scenario via getProcessPortId and the fact that input can be unsafely processed, enabling...

CVE-2020-28426 Command Injection

All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId...