{"action":"Upgrade apex-publish-static-files to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"0"}],"component":"apex-publish-static-files","cve_ids":["CVE-2018-16462"],"ecosystem":"npm","epss":0.06991,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-9jm3-5835-537m","id":"tcs_01M5KFG4C4F6Z7BG14KM093R2H","modified_at":"2023-11-08T03:59:59.577081Z","published_at":"2018-11-01T14:48:50Z","references":["https://osv.dev/vulnerability/GHSA-9jm3-5835-537m","https://nvd.nist.gov/vuln/detail/CVE-2018-16462","https://hackerone.com/reports/405694","https://github.com/advisories/GHSA-9jm3-5835-537m","https://github.com/nodejs/security-wg/blob/master/vuln/npm/475.json","https://www.npmjs.com/advisories/718"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-9jm3-5835-537m","url":"https://osv.dev/vulnerability/GHSA-9jm3-5835-537m"}],"summary":"Command Injection in apex-publish-static-files"}