CVE-2019-15609 - The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability

Back Back to CVE browser

CRITICAL

The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability

Published Feb 28, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 4.00%

Description

The kill-port-process package version < 2.2.0 is vulnerable to a Command Injection vulnerability.

Affected products

Vendor n/a Product Kill-Port-Process Default
n/a
- Version
  Fixed in 2.2.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Kill-Port-Process

n/a

Version	Status	Constraints
Fixed in 2.2.0	affected	-

Ecosystem	Package	Introduced	Fixed
npm	kill-port-process	0	2.2.0

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-77

CWE-78

OS Command Injection

References (3)

https://github.com/advisories/GHSA-xp4x-j9vh-c3wf
Advisory
https://hackerone.com/reports/661959
x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15609

Link	Providers	Tags
https://github.com/advisories/GHSA-xp4x-j9vh-c3wf		Advisory
https://hackerone.com/reports/661959		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-15609

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published Feb 28, 2020

Updated Aug 5, 2024

Reserved Aug 26, 2019

Link CVE-2019-15609

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-15609

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-15609

GHSA-XP4X-J9VH-C3WF