Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-884p-74jh-xrg2

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-884p-74jh-xrg2

Command Injection in tree-kill Versions of `tree-kill` prior to 1.2.2 are vulnerable to Command Injection. The package fails to sanitize values passed to the `kill` function. If this value is user-controlled it may allow attackers to run arbitrary commands in the server. The issue only affects Windows systems. ## Recommendation Upgrade to version 1.2.2 or later.

gitlab/npm/tree-kill/GMS-2020-791

Command Injection in tree-kill Versions of `tree-kill` prior to 1.2.2 are vulnerable to Command Injection. The package fails to sanitize values passed to the `kill` function. If this value is user-controlled it may allow attackers to run arbitrary commands in the server. The issue only affects Windows systems. ## Recommendation Upgrade to version 1.2.2 or later.