Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2020-28426

All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId.

PublishedFeb 01, 2021, 16:15

Published Byreport@snyk.io

Package (Ecosystem)IntroducedFixedLimit

kill-process-on-port(npm)0N/AN/A

CWE-78

Base Score

7.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK