{"action":"Upgrade lilconfig to 3.1.1 or later.","affected":[{"fixed":"3.1.1","introduced":"3.1.0"}],"component":"lilconfig","cve_ids":["CVE-2024-21537"],"ecosystem":"npm","epss":0.0113,"exploited":false,"fixed_versions":["3.1.1"],"ghsa_id":"GHSA-fq9m-v26v-2m4f","id":"tcs_01M5KFP23P03WRCZC75ZS774ER","modified_at":"2024-11-01T22:12:21.066635Z","published_at":"2024-10-31T06:30:45Z","references":["https://osv.dev/vulnerability/GHSA-fq9m-v26v-2m4f","https://nvd.nist.gov/vuln/detail/CVE-2024-21537","https://github.com/antonk52/lilconfig/pull/48","https://github.com/antonk52/lilconfig/commit/2c68a1ab8764fc74acc46771e1ad39ab07a9b0a7","https://github.com/antonk52/lilconfig","https://github.com/antonk52/lilconfig/releases/tag/v3.1.1","https://security.snyk.io/vuln/SNYK-JS-LILCONFIG-6263789"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fq9m-v26v-2m4f","url":"https://osv.dev/vulnerability/GHSA-fq9m-v26v-2m4f"}],"summary":"lilconfig Code Injection vulnerability"}