Homepage
About Snyk

find-process@1.2.3 vulnerabilities

find process info by port/pid/name etc.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the find-process package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Command Injection

find-process is a find process info by port/pid/name etc.

Affected versions of this package are vulnerable to Command Injection. When getting the information by PID and port number, the user needs to inform a value, which is used in a concatenation of an OS command. There is no user input check to know if the PID or the port is a number, as such, an attacker may send a malicious string that will be interpreted as an OS command.

How to fix Command Injection?

Upgrade find-process to version 1.4.5 or higher.

<1.4.5
Go back to all versions of this package