{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.0"}],"component":"openssl","cve_ids":["CVE-2023-49210"],"ecosystem":"npm","epss":0.01909,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-75w2-qv55-x7fv","id":"tcs_01M5KF8WCCTZ011PKDGMY7J1MG","modified_at":"2023-11-30T22:05:44Z","published_at":"2023-11-23T21:30:18Z","references":["https://osv.dev/vulnerability/GHSA-75w2-qv55-x7fv","https://nvd.nist.gov/vuln/detail/CVE-2023-49210","https://gist.github.com/mcoimbra/b05a55a5760172dccaa0a827647ad63e","https://github.com/ossf/malicious-packages/tree/main/malicious/npm","https://www.npmjs.com/package/openssl"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-75w2-qv55-x7fv","url":"https://osv.dev/vulnerability/GHSA-75w2-qv55-x7fv"}],"summary":"openssl npm package vulnerable to command execution"}