tree-kill (npm)
kill trees of processes
Advisories
3
Latest version
1.2.2
Released Dec 11, 2019
License
MIT
OpenSSF Scorecard
2.1 / 10
How to fix
Upgrading to 1.2.2 or later clears every advisory below that has a fix.
Upgrade commands
npm
npm install tree-kill@1.2.2yarn
yarn add tree-kill@1.2.2pnpm
pnpm add tree-kill@1.2.2Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-j7fq-p9q7-5wfv Treekill Enables OS Command Injection |
Critical EPSS 2.74% |
< 1.2.2 | 1.2.2 |
| GHSA-mxq6-vrrr-ppmg Duplicate Advisory: tree-kill vulnerable to remote code execution Withdrawn |
Critical | <= 1.2.1 | No fix yet |
| GHSA-884p-74jh-xrg2 Command Injection in tree-kill |
High EPSS 2.74% |
< 1.2.2 | 1.2.2 |
Source: git://github.com/pkrumins/node-tree-kill.git
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor