{"action":"Upgrade devcert-sanscache to 0.4.7 or later.","affected":[{"fixed":"0.4.7","introduced":"0"}],"component":"devcert-sanscache","cve_ids":["CVE-2019-10778"],"ecosystem":"npm","epss":0.03453,"exploited":false,"fixed_versions":["0.4.7"],"ghsa_id":"GHSA-4gp3-p7ph-x2jr","id":"tcs_01M5KF0DP2RWJY7QY5X9NN74K7","modified_at":"2026-03-13T22:11:33.786862Z","published_at":"2020-04-14T23:09:00Z","references":["https://osv.dev/vulnerability/GHSA-4gp3-p7ph-x2jr","https://nvd.nist.gov/vuln/detail/CVE-2019-10778","https://github.com/guybedford/devcert/commit/571f4e6d077f7f21c6aed655ae380d85a7a5d3b8","https://snyk.io/vuln/SNYK-JS-DEVCERTSANSCACHE-540926"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4gp3-p7ph-x2jr","url":"https://osv.dev/vulnerability/GHSA-4gp3-p7ph-x2jr"}],"summary":"OS Command Injection in devcert-sanscache"}