Description
A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | tree-kill | Not fixed | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | tree-kill | < 1.2.2 | 1.2.2 | GHSA-884p-74jh-xrg2 |