{"action":"Upgrade @snyk/snyk-hex-plugin to 1.1.6 or later.","affected":[{"fixed":"1.1.6","introduced":"0"}],"component":"@snyk/snyk-hex-plugin","cve_ids":["CVE-2022-22984"],"ecosystem":"npm","epss":0.03115,"exploited":false,"fixed_versions":["1.1.6"],"ghsa_id":"GHSA-4x6g-3cmx-w76r","id":"tcs_01M5KF1XNSC51X45295CDT6WRV","modified_at":"2023-11-08T04:08:15.670604Z","published_at":"2022-11-30T15:30:27Z","references":["https://osv.dev/vulnerability/GHSA-4x6g-3cmx-w76r","https://nvd.nist.gov/vuln/detail/CVE-2022-22984","https://github.com/snyk/cli/commit/80d97a93326406e09776156daf72e3caa03ae25a","https://github.com/snyk/snyk-cocoapods-plugin/commit/c73e049c5200772babde61c40aab57296bf91381","https://github.com/snyk/snyk-docker-plugin/commit/d730d7630691a61587b120bb11daaaf4b58a8357","https://github.com/snyk/snyk-gradle-plugin/commit/bb1c1c72a75e97723a76b14d2d73f70744ed5009","https://github.com/snyk/snyk-hex-plugin/commit/e8dd2a330b40d7fc0ab47e34413e80a0146d7ac3","https://github.com/snyk/snyk-mvn-plugin/commit/02cda9ba1ea36b00ead3f6ec2de0f97397ebec50","https://github.com/snyk/snyk-python-plugin/commit/8591abdd9236108ac3e30c70c09238d6bb6aabf4","https://github.com/snyk/snyk-sbt-plugin/commit/99c09eb12c9f8f2b237aea9627aab1ae3cab6437","https://www.imperva.com/blog/how-scanning-your-projects-for-security-issues-can-lead-to-remote-code-execution","https://security.snyk.io/vuln/SNYK-JS-SNYKSNYKHEXPLUGIN-3039680","https://security.snyk.io/vuln/SNYK-JS-SNYKSNYKCOCOAPODSPLUGIN-3038625","https://security.snyk.io/vuln/SNYK-JS-SNYKSBTPLUGIN-3038626","https://security.snyk.io/vuln/SNYK-JS-SNYKPYTHONPLUGIN-3039677","https://security.snyk.io/vuln/SNYK-JS-SNYKMVNPLUGIN-3038623","https://security.snyk.io/vuln/SNYK-JS-SNYKGRADLEPLUGIN-3038624","https://security.snyk.io/vuln/SNYK-JS-SNYKDOCKERPLUGIN-3039679","https://security.snyk.io/vuln/SNYK-JS-SNYK-3038622"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-4x6g-3cmx-w76r#npm/@snyk/snyk-hex-plugin","url":"https://osv.dev/vulnerability/GHSA-4x6g-3cmx-w76r"}],"summary":"Snyk plugins vulnerable to Command Injection"}