{"action":"Upgrade command-exists to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"}],"component":"command-exists","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.2.4"],"ghsa_id":"GHSA-cff4-rrq6-h78w","id":"tcs_01M5KFJGJCS8A7PT3RW5T0GZ5C","modified_at":"2020-08-31T18:31:41Z","published_at":"2019-06-03T17:31:26Z","references":["https://osv.dev/vulnerability/GHSA-cff4-rrq6-h78w","https://github.com/mathisonian/command-exists/commit/7ca91ba71604df6817a28c93d7776af9c49c431a","https://hackerone.com/reports/324453","https://github.com/mathisonian/command-exists/blob/v1.2.2/lib/command-exists.js#L49-L94","https://www.npmjs.com/advisories/659"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-cff4-rrq6-h78w","url":"https://osv.dev/vulnerability/GHSA-cff4-rrq6-h78w"}],"summary":"Command Injection in command-exists"}