{"action":"Upgrade tree-kill to 1.2.2 or later.","affected":[{"fixed":"1.2.2","introduced":"0"}],"component":"tree-kill","cve_ids":["CVE-2019-15599"],"ecosystem":"npm","epss":0.02742,"exploited":false,"fixed_versions":["1.2.2"],"ghsa_id":"GHSA-884p-74jh-xrg2","id":"tcs_01M5KFC7C23ZA5JW4Z021VAAQW","modified_at":"2023-11-08T20:41:33.741103Z","published_at":"2020-09-04T16:57:20Z","references":["https://osv.dev/vulnerability/GHSA-884p-74jh-xrg2","https://nvd.nist.gov/vuln/detail/CVE-2019-15599","https://github.com/pkrumins/node-tree-kill/commit/deee138a8cbc918463d8af5ce8c2bec33c3fd164","https://hackerone.com/reports/701183","https://github.com/pkrumins/node-tree-kill","https://github.com/pkrumins/node-tree-kill/releases/tag/v1.2.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-884p-74jh-xrg2","url":"https://osv.dev/vulnerability/GHSA-884p-74jh-xrg2"}],"summary":"Command Injection in tree-kill"}