{"action":"Upgrade gitlog to 4.0.4 or later.","affected":[{"fixed":"4.0.4","introduced":"0"}],"component":"gitlog","cve_ids":["CVE-2021-26541"],"ecosystem":"npm","epss":0.05362,"exploited":false,"fixed_versions":["4.0.4"],"ghsa_id":"GHSA-67mm-m3wx-j7fr","id":"tcs_01M5KF65SHMTV7148B7119F3B6","modified_at":"2023-11-08T04:05:21.217174Z","published_at":"2021-04-13T15:15:29Z","references":["https://osv.dev/vulnerability/GHSA-67mm-m3wx-j7fr","https://nvd.nist.gov/vuln/detail/CVE-2021-26541","https://github.com/domharrington/node-gitlog/pull/65","https://github.com/domharrington/node-gitlog/pull/65/commits/bb22ffb2c907e0284f887ab625e12b88c31f4bf4","https://advisory.checkmarx.net/advisory/CX-2020-4301","https://github.com/domharrington/node-gitlog","https://www.npmjs.com/package/gitlog"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-67mm-m3wx-j7fr","url":"https://osv.dev/vulnerability/GHSA-67mm-m3wx-j7fr"}],"summary":"Command injection in gitlog"}