{"action":"Upgrade tree-kill to 1.2.2 or later.","affected":[{"fixed":"1.2.2","introduced":"0"}],"component":"tree-kill","cve_ids":["CVE-2019-15598"],"ecosystem":"npm","epss":0.02742,"exploited":false,"fixed_versions":["1.2.2"],"ghsa_id":"GHSA-j7fq-p9q7-5wfv","id":"tcs_01M5KFX8W2XQ8DACQFHN8SKBM5","modified_at":"2024-04-22T23:44:02.289143Z","published_at":"2022-05-24T17:04:00Z","references":["https://osv.dev/vulnerability/GHSA-j7fq-p9q7-5wfv","https://nvd.nist.gov/vuln/detail/CVE-2019-15598","https://github.com/pkrumins/node-tree-kill/issues/30","https://github.com/pkrumins/node-tree-kill/pull/31","https://github.com/pkrumins/node-tree-kill/commit/ff73dbf144c4c2daa67799a50dfff59cd455c63c","https://hackerone.com/reports/701183","https://hackerone.com/reports/703415","https://github.com/node-modules/treekill/blob/master/index.js#L32","https://github.com/pkrumins/node-tree-kill","https://security.snyk.io/vuln/SNYK-JS-TREEKILL-536781"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j7fq-p9q7-5wfv","url":"https://osv.dev/vulnerability/GHSA-j7fq-p9q7-5wfv"}],"summary":"Treekill Enables OS Command Injection"}