{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.1"}],"component":"font-converter","cve_ids":["CVE-2022-21165"],"ecosystem":"npm","epss":0.03072,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g2c3-vwff-m3xr","id":"tcs_01M5KFPP7M2XMRH6P51W223S5Y","modified_at":"2024-04-22T23:44:02.873117Z","published_at":"2022-08-29T20:06:54Z","references":["https://osv.dev/vulnerability/GHSA-g2c3-vwff-m3xr","https://nvd.nist.gov/vuln/detail/CVE-2022-21165","https://github.com/zgec/node-js-font-converter","https://github.com/zgec/node-js-font-converter/blob/master/index.js#L12","https://security.snyk.io/vuln/SNYK-JS-FONTCONVERTER-2976194"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g2c3-vwff-m3xr","url":"https://osv.dev/vulnerability/GHSA-g2c3-vwff-m3xr"}],"summary":"Font-Converter Vulnerable to Arbitrary Command Injection"}