{"action":"Upgrade kill-port-process to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"kill-port-process","cve_ids":["CVE-2019-15609"],"ecosystem":"npm","epss":0.04003,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-xp4x-j9vh-c3wf","id":"tcs_01M5KGJED6Z1NTMCV96VR2S3HW","modified_at":"2026-07-02T05:15:09.814414190Z","published_at":"2022-02-10T20:20:31Z","references":["https://osv.dev/vulnerability/GHSA-xp4x-j9vh-c3wf","https://nvd.nist.gov/vuln/detail/CVE-2019-15609","https://hackerone.com/reports/661959","https://github.com/hilleer/kill-port-process"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xp4x-j9vh-c3wf","url":"https://osv.dev/vulnerability/GHSA-xp4x-j9vh-c3wf"}],"summary":"OS Command Injection and Command Injection in kill-port-process"}