{"action":"Upgrade git-tags-remote to 1.0.4 or later.","affected":[{"fixed":"1.0.4","introduced":"0"}],"component":"git-tags-remote","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.4"],"ghsa_id":"GHSA-gm9x-q798-hmr4","id":"tcs_01M5KFS1G96BN21ZXAAWAW8B3M","modified_at":"2021-09-23T17:26:33Z","published_at":"2020-07-29T14:53:40Z","references":["https://osv.dev/vulnerability/GHSA-gm9x-q798-hmr4","https://github.com/sh0ji/git-tags-remote/issues/58","https://github.com/sh0ji/git-tags-remote/commit/a20488960cbd2c98455386108253094897ebfc1c","https://github.com/sh0ji/git-tags-remote","https://www.npmjs.com/advisories/1517"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-gm9x-q798-hmr4","url":"https://osv.dev/vulnerability/GHSA-gm9x-q798-hmr4"}],"summary":"Command Injection in git-tags-remote"}