VDB
Sign up
CRITICAL9.8

GHSA-xp4x-j9vh-c3wf

OS Command Injection and Command Injection in kill-port-process

Quick fix

GHSA-xp4x-j9vh-c3wf — kill-port-process: upgrade to the fixed version with the command below.

npm install kill-port-process@2.2.0

Details

The kill-port-process package prior to version 2.2.0 is vulnerable to a Command Injection.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/kill-port-process
Introduced in: 0Fixed in: 2.2.0
Fixnpm install kill-port-process@2.2.0

References