{"action":"Upgrade fs-path to 0.0.25 or later.","affected":[{"fixed":"0.0.25","introduced":"0"}],"component":"fs-path","cve_ids":["CVE-2020-8298"],"ecosystem":"npm","epss":0.11168,"exploited":false,"fixed_versions":["0.0.25"],"ghsa_id":"GHSA-8mrf-64fw-2x75","id":"tcs_01M5KFDHWG48WFQ5E1H151V9KH","modified_at":"2023-11-08T04:04:16.444879Z","published_at":"2021-03-25T21:06:41Z","references":["https://osv.dev/vulnerability/GHSA-8mrf-64fw-2x75","https://nvd.nist.gov/vuln/detail/CVE-2020-8298","https://github.com/pillys/fs-path/pull/6","https://github.com/pillys/fs-path/commit/88ff5ee51046bb2c5d5e9c5afe6819b032092ce7","https://hackerone.com/reports/324491"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8mrf-64fw-2x75","url":"https://osv.dev/vulnerability/GHSA-8mrf-64fw-2x75"}],"summary":"Command injection in fs-path"}