{"action":"Upgrade ascii-art to 1.4.4 or later.","affected":[{"fixed":"1.4.4","introduced":"0"}],"component":"ascii-art","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.4.4"],"ghsa_id":"GHSA-9hqj-38j2-5jgm","id":"tcs_01M5KFG0CKHS71Z4FS4Q1FZ0X3","modified_at":"2020-08-31T18:33:35Z","published_at":"2020-09-01T21:19:23Z","references":["https://osv.dev/vulnerability/GHSA-9hqj-38j2-5jgm","https://hackerone.com/reports/390631","https://github.com/nodejs/security-wg/blob/master/vuln/npm/471.json","https://www.npmjs.com/advisories/727"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-9hqj-38j2-5jgm","url":"https://osv.dev/vulnerability/GHSA-9hqj-38j2-5jgm"}],"summary":"Command Injection in ascii-art"}