{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.3"}],"component":"@stoqey/gnuplot","cve_ids":["CVE-2021-33360"],"ecosystem":"npm","epss":0.01127,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-795w-7426-m94j","id":"tcs_01M5KF9E01MQYZ16EJ8NDZ7JT0","modified_at":"2023-11-08T04:06:04.315193Z","published_at":"2023-03-10T18:30:22Z","references":["https://osv.dev/vulnerability/GHSA-795w-7426-m94j","https://nvd.nist.gov/vuln/detail/CVE-2021-33360","https://advisory.checkmarx.net/advisory/CX-2021-4811","https://github.com/stoqey/gnuplot","https://github.com/stoqey/gnuplot/blob/cd76060a15f58348baeef1c5fd867ce856515949/src/index.ts#L211-L217"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-795w-7426-m94j","url":"https://osv.dev/vulnerability/GHSA-795w-7426-m94j"}],"summary":"stoqey/gnuplot is vulnerable to command injection"}