Description
A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Remediation
References
https://hackerone.com/reports/701183
Related Vulnerabilities
CVE-2020-7782 Vulnerability in npm package spritesheet-js
CVE-2021-4305 Vulnerability in npm package robots-txt-guard
CVE-2023-24807 Vulnerability in npm package undici
CVE-2019-1003078 Vulnerability in maven package org.jenkins-ci.plugins:labmanager
CVE-2016-4464 Vulnerability in maven package org.apache.cxf.fediz:plugin