Description
A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Remediation
References
https://hackerone.com/reports/701183
Related Vulnerabilities
CVE-2020-15095 Vulnerability in npm package npm
CVE-2020-2164 Vulnerability in maven package org.jenkins-ci.plugins:artifactory
CVE-2021-21120 Vulnerability in maven package org.webjars.npm:electron
CVE-2020-12668 Vulnerability in maven package com.hubspot.jinjava:jinjava
CVE-2016-10744 Vulnerability in maven package org.webjars.bower:select2