{"action":"Upgrade aws-lambda to 1.0.5 or later.","affected":[{"fixed":"1.0.5","introduced":"0"}],"component":"aws-lambda","cve_ids":["CVE-2019-10777"],"ecosystem":"npm","epss":0.01644,"exploited":false,"fixed_versions":["1.0.5"],"ghsa_id":"GHSA-934x-72xh-5hrg","id":"tcs_01M5KFEJKFW99KSGG6C42PPVQN","modified_at":"2026-03-13T22:11:37.044509Z","published_at":"2020-02-14T23:09:45Z","references":["https://osv.dev/vulnerability/GHSA-934x-72xh-5hrg","https://nvd.nist.gov/vuln/detail/CVE-2019-10777","https://github.com/awspilot/cli-lambda-deploy","https://snyk.io/vuln/SNYK-JS-AWSLAMBDA-540839"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-934x-72xh-5hrg","url":"https://osv.dev/vulnerability/GHSA-934x-72xh-5hrg"}],"summary":"OS command injection in aws-lambda"}