{"action":"Upgrade fs-path to 0.0.25 or later.","affected":[{"fixed":"0.0.25","introduced":"0"}],"component":"fs-path","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.0.25"],"ghsa_id":"GHSA-gc94-6w89-hpqr","id":"tcs_01M5KFRA84TSX0YQ9ZZGY7HFWN","modified_at":"2021-09-16T20:59:56Z","published_at":"2019-06-12T16:37:07Z","references":["https://osv.dev/vulnerability/GHSA-gc94-6w89-hpqr","https://github.com/pillys/fs-path/pull/5","https://hackerone.com/reports/324491","https://github.com/pillys/fs-path","https://www.npmjs.com/advisories/661"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-gc94-6w89-hpqr","url":"https://osv.dev/vulnerability/GHSA-gc94-6w89-hpqr"}],"summary":"Command Injection in fs-path"}