Kill-Process-By-Name Project: Security Vulnerabilities
This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in the index.js file.
CVSS Score
5.6
EPSS Score
0.014
Published
2021-03-15