{"action":"Upgrade simple-git to 3.5.0 or later.","affected":[{"fixed":"3.5.0","introduced":"0"}],"component":"simple-git","cve_ids":["CVE-2022-24066"],"ecosystem":"npm","epss":0.03896,"exploited":false,"fixed_versions":["3.5.0"],"ghsa_id":"GHSA-28xr-mwxg-3qc8","id":"tcs_01M5KESHQKCZCX3BV91CHDRPEA","modified_at":"2025-01-14T10:57:24.837290Z","published_at":"2022-04-02T00:00:13Z","references":["https://osv.dev/vulnerability/GHSA-28xr-mwxg-3qc8","https://nvd.nist.gov/vuln/detail/CVE-2022-24066","https://github.com/steveukx/git-js/commit/2040de601c894363050fef9f28af367b169a56c5","https://gist.github.com/lirantal/a930d902294b833514e821102316426b","https://github.com/steveukx/git-js","https://github.com/steveukx/git-js/releases/tag/simple-git%403.5.0","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2434820","https://snyk.io/vuln/SNYK-JS-SIMPLEGIT-2434306"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-28xr-mwxg-3qc8","url":"https://osv.dev/vulnerability/GHSA-28xr-mwxg-3qc8"}],"summary":"Command injection in simple-git"}