Description
A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Remediation
References
https://hackerone.com/reports/701183
Related Vulnerabilities
CVE-2020-16024 Vulnerability in npm package electron
CVE-2016-10644 Vulnerability in npm package slimerjs-edge
CVE-2017-18352 Vulnerability in npm package rendertron-middleware
CVE-2020-11111 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2020-15138 Vulnerability in maven package org.webjars:prismjs