CVE-2019-15609

The kill-port-process package version 2.2.0 is vulnerable to a Command Injection vulnerability...

Node.js third-party modules: Command Injection vulnerability in kill-port-process package

I would like to report a command injection vulnerability in the kill-port-process package. It allows an attacker to inject arbitrary commands. Module module name: kill-port-process version: 1.1.0 npm page: https://www.npmjs.com/package/kill-port-process Module Stats 0 downloads in the last day 13...

Command Injection

Overview Versions of kill-port prior to 1.3.2 are vulnerable to Command Injection. The package does not validate user input on the kill function. This may allow attackers to run arbitrary commands in the system if user input such as the port number is passed directly to the function. Recommendati...

GHSA-PMV6-GF98-P3R5 Command Injection in kill-port

Versions of kill-port prior to 1.3.2 are vulnerable to Command Injection. The package does not validate user input on the kill function. This may allow attackers to run arbitrary commands in the system if user input such as the port number is passed directly to the function. Recommendation Upgrad...

Command Injection in kill-port

Versions of kill-port prior to 1.3.2 are vulnerable to Command Injection. The package does not validate user input on the kill function. This may allow attackers to run arbitrary commands in the system if user input such as the port number is passed directly to the function. Recommendation Upgrad...

@o/mobx-bridge (>=2.4.0, <=2.5.2), marcura-common-ui-helper (>=1.0.0, <=1.0.1) +1 more potentially affected by CVE-2019-5414 via kill-port (>=1.1.0, <=1.3.1)

kill-port NPM version =1.1.0, =2.4.0, =1.0.0, =0.1.0-alpha, =0.2.0 Source cves: CVE-2019-5414 Source advisory: OSV:GHSA-PMV6-GF98-P3R5...

CVE-2019-5414

If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port 1.3.2...

Design/Logic Flaw

If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port 1.3.2...

CVE-2019-5414

CVE-2019-5414 affects the Node.js module kill-port (npm package). The root cause is the use of exec in the module, which allows command injection when an attacker can control the port value. Versions prior to 1.3.2 are vulnerable. Reported impacts include arbitrary OS command execution if user in...

Remote Code Execution (RCE)

kill-port is vulnerable to remote code execution. An attacker is able to inject and execute arbitrary OS commands due to the usage of exec in a third-party module...

Node.js third-party modules: Command Injection Vulnerability in kill-port Package

I would like to report a command injection vulnerability in kill-port. It allows an attacker to inject arbitrary commands. Module module name: kill-port version: 1.3.1 npm page: https://www.npmjs.com/package/kill-port Module Description Kill the process running on given port Module Stats 5,282...