{"action":"Upgrade moment-timezone to 0.5.35 or later.","affected":[{"fixed":"0.5.35","introduced":"0.1.0"}],"component":"moment-timezone","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.5.35"],"ghsa_id":"GHSA-56x4-j7p9-fcf9","id":"tcs_01M5KF2W39WGVT47NK10TS7W9T","modified_at":"2022-08-30T20:31:21Z","published_at":"2022-08-30T20:31:21Z","references":["https://osv.dev/vulnerability/GHSA-56x4-j7p9-fcf9","https://github.com/moment/moment-timezone/security/advisories/GHSA-56x4-j7p9-fcf9","https://github.com/moment/moment-timezone/commit/ce955a301ff372e8e9fb3a5b516620c60e7a082a","https://github.com/moment/moment-timezone"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-56x4-j7p9-fcf9","url":"https://osv.dev/vulnerability/GHSA-56x4-j7p9-fcf9"}],"summary":"Command Injection in moment-timezone"}