{"action":"Upgrade shescape to 1.5.1 or later.","affected":[{"fixed":"1.5.1","introduced":"1.4.0"}],"component":"shescape","cve_ids":["CVE-2022-24725"],"ecosystem":"npm","epss":0.00499,"exploited":false,"fixed_versions":["1.5.1"],"ghsa_id":"GHSA-446w-rrm4-r47f","id":"tcs_01M5KEZ46313WVCR04YA6N6MF7","modified_at":"2023-11-08T04:08:33.838531Z","published_at":"2022-03-03T19:26:11Z","references":["https://osv.dev/vulnerability/GHSA-446w-rrm4-r47f","https://github.com/ericcornelissen/shescape/security/advisories/GHSA-446w-rrm4-r47f","https://nvd.nist.gov/vuln/detail/CVE-2022-24725","https://github.com/ericcornelissen/shescape/issues/169","https://github.com/ericcornelissen/shescape/pull/170","https://github.com/ericcornelissen/shescape"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-446w-rrm4-r47f","url":"https://osv.dev/vulnerability/GHSA-446w-rrm4-r47f"}],"summary":"Exposure of home directory through shescape on Unix with Bash"}