https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 07:36:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-50240 EUVD-2026-50240 https://cve.radiocsirt.org/vuln/euvd-2026-50240 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5414 <p>If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port &lt; 1.3.2.</p> <p>If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port &lt; 1.3.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5414 https://cve.radiocsirt.org/vuln/ghsa-pmv6-gf98-p3r5 <p><strong>Affected:</strong> npm: kill-port</p> <p>Versions of `kill-port` prior to 1.3.2 are vulnerable to Command Injection. The package does not validate user input on the `kill` function. This may allow attackers to run arbitrary commands in the system if user input (such as the port number) is passed directly to the function.</p> <p>## Recommendation</p> <p>Upgrade to version 1.3.2 or later.</p> <p><strong>Affected:</strong> npm: kill-port</p> <p>Versions of `kill-port` prior to 1.3.2 are vulnerable to Command Injection. The package does not validate user input on the `kill` function. This may allow attackers to run arbitrary commands in the system if user input (such as the port number) is passed directly to the function.</p> <p>## Recommendation</p> <p>Upgrade to version 1.3.2 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-pmv6-gf98-p3r5 https://cve.radiocsirt.org/vuln/gsd-2019-5414 gsd-2019-5414 https://cve.radiocsirt.org/vuln/gsd-2019-5414