{"action":"Upgrade get-npm-package-version to 1.0.7 or later.","affected":[{"fixed":"1.0.7","introduced":"0"}],"component":"get-npm-package-version","cve_ids":["CVE-2020-7795"],"ecosystem":"npm","epss":0.03968,"exploited":false,"fixed_versions":["1.0.7"],"ghsa_id":"GHSA-4h66-vghf-xg5x","id":"tcs_01M5KF0G94H6CBPCB1TGXYV6PW","modified_at":"2023-11-08T04:04:10.946675Z","published_at":"2022-08-03T00:00:57Z","references":["https://osv.dev/vulnerability/GHSA-4h66-vghf-xg5x","https://nvd.nist.gov/vuln/detail/CVE-2020-7795","https://github.com/hoperyy/get-npm-package-version/commit/40b1cf31a0607ea66f9e30a0c3af1383b52b2dec","https://github.com/hoperyy/get-npm-package-version/commit/49459d4a3ce68587d48ffa8dead86fc9ed58e965","https://github.com/hoperyy/get-npm-package-version","https://github.com/hoperyy/get-npm-package-version/blob/338a5882298eb2c2194538db41166cae13c39e03/index.js#L17","https://security.snyk.io/vuln/SNYK-JS-GETNPMPACKAGEVERSION-1050390"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4h66-vghf-xg5x","url":"https://osv.dev/vulnerability/GHSA-4h66-vghf-xg5x"}],"summary":"get-npm-package-version Command Injection vulnerability"}