Description
A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | treekill | Not fixed | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | tree-kill | < 1.2.2 | 1.2.2 | GHSA-j7fq-p9q7-5wfv |