Description
The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability.
Remediation
References
https://hackerone.com/reports/661959
Related Vulnerabilities
CVE-2020-11022 Vulnerability in npm package jquery
CVE-2018-3730 Vulnerability in npm package mcstatic
CVE-2020-8203 Vulnerability in maven package org.webjars.bower:lodash
CVE-2020-36376 Vulnerability in npm package aaptjs
CVE-2022-36920 Vulnerability in maven package org.jenkins-ci.plugins:coverity