{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.2"}],"component":"kill-process-on-port","cve_ids":["CVE-2020-28426"],"ecosystem":"npm","epss":0.01929,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5wqj-f379-6jh4","id":"tcs_01M5KF4Z1MS1QNSJF9PMXHTNTM","modified_at":"2023-11-08T04:03:25.744037Z","published_at":"2021-03-19T21:19:47Z","references":["https://osv.dev/vulnerability/GHSA-5wqj-f379-6jh4","https://nvd.nist.gov/vuln/detail/CVE-2020-28426","https://snyk.io/vuln/SNYK-JS-KILLPROCESSONPORT-1055458"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-5wqj-f379-6jh4","url":"https://osv.dev/vulnerability/GHSA-5wqj-f379-6jh4"}],"summary":"Command injection in kill-process-on-port"}