{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.4"}],"component":"ffmpegdotjs","cve_ids":["CVE-2021-23376"],"ecosystem":"npm","epss":0.01959,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-f39r-cpmj-whcg","id":"tcs_01M5KFMA2196AEQNFR8FTKZMFH","modified_at":"2023-11-08T04:05:05.983919Z","published_at":"2021-05-06T15:55:21Z","references":["https://osv.dev/vulnerability/GHSA-f39r-cpmj-whcg","https://nvd.nist.gov/vuln/detail/CVE-2021-23376","https://github.com/TRomesh/ffmpegdotjs","https://github.com/TRomesh/ffmpegdotjs/blob/b7395daf0bdcb81218340427eb7073cdd28462af/index.js#23L219","https://snyk.io/vuln/SNYK-JS-FFMPEGDOTJS-1078542"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-f39r-cpmj-whcg","url":"https://osv.dev/vulnerability/GHSA-f39r-cpmj-whcg"}],"summary":"Command Injection in ffmpegdotjs"}