{"action":"Upgrade nemo-appium to 0.0.9 or later.","affected":[{"fixed":"0.0.9","introduced":"0"}],"component":"nemo-appium","cve_ids":["CVE-2022-21129"],"ecosystem":"npm","epss":0.02774,"exploited":false,"fixed_versions":["0.0.9"],"ghsa_id":"GHSA-c6rx-gxqv-vr5j","id":"tcs_01M5KFHZX7KBNGN9EBVGWYVB3M","modified_at":"2025-03-27T23:31:52Z","published_at":"2023-01-31T06:30:26Z","references":["https://osv.dev/vulnerability/GHSA-c6rx-gxqv-vr5j","https://nvd.nist.gov/vuln/detail/CVE-2022-21129","https://github.com/paypal/nemo-appium/commit/aa271d36dd5c81baae3c43aa2616c84f0ee4195f","https://github.com/paypal/nemo-appium","https://github.com/paypal/nemo-appium/blob/master/index.js%23L27","https://security.snyk.io/vuln/SNYK-JS-NEMOAPPIUM-3183747"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-c6rx-gxqv-vr5j","url":"https://osv.dev/vulnerability/GHSA-c6rx-gxqv-vr5j"}],"summary":"nemo-appium vulnerable to OS Command Injection"}