{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.2"}],"component":"node-ps","cve_ids":["CVE-2020-7785"],"ecosystem":"npm","epss":0.02472,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4rv9-5vc4-88cg","id":"tcs_01M5KF1DN8QBH14WYQ7PBQW4WD","modified_at":"2023-11-08T04:04:10.396194Z","published_at":"2021-03-19T21:21:06Z","references":["https://osv.dev/vulnerability/GHSA-4rv9-5vc4-88cg","https://nvd.nist.gov/vuln/detail/CVE-2020-7785","https://github.com/fortruce/node-ps/blob/master/lib/index.js#L72","https://snyk.io/vuln/SNYK-JS-NODEPS-1048335","https://www.npmjs.com/package/node-ps"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4rv9-5vc4-88cg","url":"https://osv.dev/vulnerability/GHSA-4rv9-5vc4-88cg"}],"summary":"Command injection in node-ps"}