{"action":"Upgrade screenshot-desktop to 1.15.2 or later.","affected":[{"fixed":"1.15.2","introduced":"0"}],"component":"screenshot-desktop","cve_ids":["CVE-2025-55294"],"ecosystem":"npm","epss":0.01441,"exploited":false,"fixed_versions":["1.15.2"],"ghsa_id":"GHSA-gjx4-2c7g-fm94","id":"tcs_01M5KFRYBYE6BN5WCE86R5A7WM","modified_at":"2025-08-19T20:42:37.558563Z","published_at":"2025-08-19T20:17:45Z","references":["https://osv.dev/vulnerability/GHSA-gjx4-2c7g-fm94","https://github.com/bencevans/screenshot-desktop/security/advisories/GHSA-gjx4-2c7g-fm94","https://nvd.nist.gov/vuln/detail/CVE-2025-55294","https://github.com/bencevans/screenshot-desktop/commit/59c87b0c175eec76090e6ccde313f4fc5d569b78","https://github.com/bencevans/screenshot-desktop"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gjx4-2c7g-fm94","url":"https://osv.dev/vulnerability/GHSA-gjx4-2c7g-fm94"}],"summary":"screenshot-desktop vulnerable to command Injection via `format` option"}