Description
A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Remediation
References
https://hackerone.com/reports/701183
Related Vulnerabilities
CVE-2020-28479 Vulnerability in maven package org.webjars.npm:jointjs
CVE-2021-25122 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2020-7771 Vulnerability in npm package asciitable.js
CVE-2018-16478 Vulnerability in npm package simplehttpserver
CVE-2022-1243 Vulnerability in maven package org.webjars.npm:urijs