{"action":"Upgrade codiad/codiad to 2.8.3 or later.","affected":[{"fixed":"2.8.3","introduced":"0"}],"component":"codiad/codiad","cve_ids":["CVE-2017-11366"],"ecosystem":"Packagist","epss":0.07547,"exploited":false,"fixed_versions":["2.8.3"],"ghsa_id":"GHSA-jccv-3h4x-35mv","id":"tcs_01M5KF4FP0QF0C0KV1JRWV9WHY","modified_at":"2024-04-25T22:43:36.870925Z","published_at":"2022-05-13T01:42:17Z","references":["https://osv.dev/vulnerability/GHSA-jccv-3h4x-35mv","https://nvd.nist.gov/vuln/detail/CVE-2017-11366","https://github.com/Codiad/Codiad/issues/1011","https://github.com/Codiad/Codiad/pull/1013","https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1","https://github.com/Codiad/Codiad/commit/ca5089eeba42d16ce3a7f86be628ac7750780111","https://github.com/Codiad/Codiad","http://www.jianshu.com/p/41ac7ac2a7af"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jccv-3h4x-35mv","url":"https://osv.dev/vulnerability/GHSA-jccv-3h4x-35mv"}],"summary":"Codiad Vulnerable to Shell Command Injection"}