{"action":"Upgrade react-dev-utils to 11.0.4 or later.","affected":[{"fixed":"11.0.4","introduced":"0.4.0"}],"component":"react-dev-utils","cve_ids":["CVE-2021-24033"],"ecosystem":"npm","epss":0.03289,"exploited":false,"fixed_versions":["11.0.4"],"ghsa_id":"GHSA-5q6m-3h65-w53x","id":"tcs_01M5KF4EAK943FKJ5C0R6213EG","modified_at":"2023-11-08T04:05:14.230118Z","published_at":"2021-03-11T22:26:09Z","references":["https://osv.dev/vulnerability/GHSA-5q6m-3h65-w53x","https://nvd.nist.gov/vuln/detail/CVE-2021-24033","https://github.com/facebook/create-react-app/pull/10644","https://github.com/facebook/create-react-app/commit/f5e415f3a5b66f07dcc60aba1b445fa7cda97268","https://github.com/facebook/create-react-app","https://www.facebook.com/security/advisories/cve-2021-24033","https://www.huntr.dev/bounties/1-npm-react-dev-utils"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-5q6m-3h65-w53x","url":"https://osv.dev/vulnerability/GHSA-5q6m-3h65-w53x"}],"summary":"react-dev-utils OS Command Injection in function `getProcessForPort`"}