{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.1"}],"component":"push-dir","cve_ids":["CVE-2019-10803"],"ecosystem":"npm","epss":0.02836,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-926x-m6m5-3mmp","id":"tcs_01M5KFED5P3CXERDCY8TF39BPP","modified_at":"2026-07-08T05:56:12.159835608Z","published_at":"2022-02-09T22:50:06Z","references":["https://osv.dev/vulnerability/GHSA-926x-m6m5-3mmp","https://nvd.nist.gov/vuln/detail/CVE-2019-10803","https://github.com/L33T-KR3W/push-dir/blob/master/index.js#L139","https://snyk.io/vuln/SNYK-JS-PUSHDIR-559009"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-926x-m6m5-3mmp","url":"https://osv.dev/vulnerability/GHSA-926x-m6m5-3mmp"}],"summary":"push-dir Enables OS Command Injection"}