{"action":"Upgrade git-diff-apply to 0.22.2 or later.","affected":[{"fixed":"0.22.2","introduced":"0"}],"component":"git-diff-apply","cve_ids":["CVE-2019-10776"],"ecosystem":"npm","epss":0.02147,"exploited":false,"fixed_versions":["0.22.2"],"ghsa_id":"GHSA-84cm-v6jp-gjmr","id":"tcs_01M5KFBPQHE11AH6Y9400MJ9TE","modified_at":"2025-01-14T07:14:32.007522Z","published_at":"2020-02-14T23:09:24Z","references":["https://osv.dev/vulnerability/GHSA-84cm-v6jp-gjmr","https://nvd.nist.gov/vuln/detail/CVE-2019-10776","https://github.com/kellyselden/git-diff-apply/commit/106d61d3ae723b4257c2a13e67b95eb40a27e0b5","https://snyk.io/vuln/SNYK-JS-GITDIFFAPPLY-540774","https://snyk.io/vuln/SNYK-JS-GITDIFFAPPLY-540774,"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-84cm-v6jp-gjmr","url":"https://osv.dev/vulnerability/GHSA-84cm-v6jp-gjmr"}],"summary":"OS command injection in git-diff-apply"}