{"action":"Upgrade async-git to 1.13.2 or later.","affected":[{"fixed":"1.13.2","introduced":"0"}],"component":"async-git","cve_ids":["CVE-2021-3190"],"ecosystem":"npm","epss":0.05387,"exploited":false,"fixed_versions":["1.13.2"],"ghsa_id":"GHSA-6c3f-p5wp-34mh","id":"tcs_01M5KF6KZNK30ECSGETDPYMEP8","modified_at":"2023-11-08T04:05:51.640137Z","published_at":"2021-01-29T18:14:00Z","references":["https://osv.dev/vulnerability/GHSA-6c3f-p5wp-34mh","https://nvd.nist.gov/vuln/detail/CVE-2021-3190","https://github.com/omrilotan/async-git/pull/13","https://github.com/omrilotan/async-git/pull/13/commits/611823bd97dd41e9e8127c38066868ff9dcfa57a","https://github.com/omrilotan/async-git/pull/13/commits/a5f45f58941006c4cc1699609383b533d9b92c6a","https://github.com/omrilotan/async-git/pull/14","https://advisory.checkmarx.net/advisory/CX-2021-4772","https://github.com/omrilotan/async-git","https://www.npmjs.com/package/async-git"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6c3f-p5wp-34mh","url":"https://osv.dev/vulnerability/GHSA-6c3f-p5wp-34mh"}],"summary":"OS Command Injection in async-git"}