CVE-2021-23355

CVE-2021-23355 is a critical command injection vulnerability affecting all versions of the ps-kill package. It allows an unauthenticated attacker to execute arbitrary commands by providing malicious input to the kill function, due to the unsanitized use of child_process.exec. With a CVSS score of 9.8, this vulnerability presents a severe risk, enabling complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.