{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.1"}],"component":"proctree","cve_ids":["CVE-2021-34082"],"ecosystem":"npm","epss":0.04777,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cv76-rv4h-4mqc","id":"tcs_01M5KFKN185YJFWQ2ZBKR78E04","modified_at":"2023-11-08T04:06:07.143828Z","published_at":"2022-06-03T00:00:59Z","references":["https://osv.dev/vulnerability/GHSA-cv76-rv4h-4mqc","https://nvd.nist.gov/vuln/detail/CVE-2021-34082","https://advisory.checkmarx.net/advisory/CX-2021-4783","https://github.com/allenhwkim/proctree","https://github.com/allenhwkim/proctree/blob/master/index.js#L46"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cv76-rv4h-4mqc","url":"https://osv.dev/vulnerability/GHSA-cv76-rv4h-4mqc"}],"summary":"OS Command Injection in proctree"}