{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.0"}],"component":"serial-number","cve_ids":["CVE-2019-10804"],"ecosystem":"npm","epss":0.02836,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3fw4-4h3m-892h","id":"tcs_01M5KEX7TZ86ZRPT80E82CFWK7","modified_at":"2026-07-08T05:56:09.490326411Z","published_at":"2021-04-13T15:22:19Z","references":["https://osv.dev/vulnerability/GHSA-3fw4-4h3m-892h","https://nvd.nist.gov/vuln/detail/CVE-2019-10804","https://github.com/es128/serial-number/blob/master/index.js#L106","https://snyk.io/vuln/SNYK-JS-SERIALNUMBER-559010"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-3fw4-4h3m-892h","url":"https://osv.dev/vulnerability/GHSA-3fw4-4h3m-892h"}],"summary":"OS Command Injection in serial-number"}