Kill-port Project Security Vulnerabilities

CVE-2022-25973

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port...

CVE-2021-23363

This affects the package kill-by-port before 0.0.2. If (attacker-controlled) user input is given to the killByPort function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input...

CVE-2020-28426

All versions of package kill-process-on-port are vulnerable to Command Injection via...

CVE-2019-15609

The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection...

CVE-2019-5414

If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port <...