EUVD-2021-0615

Malware in sbrugna...

Command injection in kill-process-on-port

All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId...

GHSA-5WQJ-F379-6JH4 Command injection in kill-process-on-port

All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId...

CVE-2020-28426 Command Injection

All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId...

CVE-2020-28426

Summary: CVE-2020-28426 affects the npm package kill-process-on-port. All versions are vulnerable to Command Injection through the a.getProcessPortId function. Concrete details across sources include exploit scenario via getProcessPortId and the fact that input can be unsafely processed, enabling...