Description
All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument.
Remediation
References
https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070
https://www.npmjs.com/package/mc-kill-port
Related Vulnerabilities
CVE-2022-26585 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-41881 Vulnerability in maven package io.netty:netty-codec-haproxy
CVE-2023-33779 Vulnerability in maven package com.xuxueli:xxl-job
CVE-2021-28165 Vulnerability in maven package org.eclipse.jetty:jetty-io
CVE-2020-8203 Vulnerability in maven package org.webjars:lodash