https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T14:25:18.976354+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-03698 cnvd-2020-03698 2026-10-24T14:25:18.979510+00:00 cnvd-2020-03698 https://cve.radiocsirt.org/vuln/euvd-2026-57153 EUVD-2026-57153 2026-10-24T14:25:18.979545+00:00 EUVD-2026-57153 https://cve.radiocsirt.org/vuln/fkie_cve-2019-15599 fkie_cve-2019-15599 2026-10-24T14:25:18.979559+00:00

A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.

 https://cve.radiocsirt.org/vuln/ghsa-884p-74jh-xrg2 GHSA-884p-74jh-xrg2 — Command Injection in tree-kill 2026-10-24T14:25:18.979587+00:00

Affected: npm: tree-kill

Versions of `tree-kill` prior to 1.2.2 are vulnerable to Command Injection. The package fails to sanitize values passed to the `kill` function. If this value is user-controlled it may allow attackers to run arbitrary commands in the server. The issue only affects Windows systems.

## Recommendation

Upgrade to version 1.2.2 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-15599 gsd-2019-15599 2026-10-24T14:25:18.979613+00:00 gsd-2019-15599