{"action":"Upgrade vcspull to 1.11.1 or later.","affected":[{"fixed":"1.11.1","introduced":"0"}],"component":"vcspull","cve_ids":["CVE-2022-21187"],"ecosystem":"PyPI","epss":0.03624,"exploited":false,"fixed_versions":["1.11.1"],"ghsa_id":"GHSA-mv2w-4jqc-6fg4","id":"tcs_01M5KFRPEFK5GYRPHQ2EDWVCS9","modified_at":"2026-06-29T12:26:21.761856147Z","published_at":"2022-03-15T00:00:53Z","references":["https://osv.dev/vulnerability/GHSA-mv2w-4jqc-6fg4","https://nvd.nist.gov/vuln/detail/CVE-2022-21187","https://github.com/vcs-python/libvcs/pull/306","https://github.com/vcs-python/vcspull/commit/e1b77128a1fa0754625b5f43d8bc47956f21f33e","https://github.com/pypa/advisory-database/tree/main/vulns/libvcs/PYSEC-2022-163.yaml","https://github.com/vcs-python/libvcs/blob/master/CHANGES#libvcs-0111-2022-03-12","https://github.com/vcs-python/libvcs/blob/v0.11.1/CHANGES%23libvcs-0111-2022-03-12","https://github.com/vcs-python/vcspull/blob/master/CHANGES#vcspull-1111-2022-03-12","https://snyk.io/vuln/SNYK-PYTHON-LIBVCS-2421204"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-mv2w-4jqc-6fg4#PyPI/vcspull","url":"https://osv.dev/vulnerability/GHSA-mv2w-4jqc-6fg4"}],"summary":"Command injection in libvcs and vcspull"}