{"action":"Upgrade pidusage to 1.1.5 or later.","affected":[{"fixed":"1.1.5","introduced":"0"}],"component":"pidusage","cve_ids":["CVE-2017-1000220"],"ecosystem":"npm","epss":0.05056,"exploited":false,"fixed_versions":["1.1.5"],"ghsa_id":"GHSA-h2p3-h48h-9jj7","id":"tcs_01M5KFSWEP7Z4YHDANWPS6KB9N","modified_at":"2024-10-16T16:50:14Z","published_at":"2022-05-13T01:41:00Z","references":["https://osv.dev/vulnerability/GHSA-h2p3-h48h-9jj7","https://nvd.nist.gov/vuln/detail/CVE-2017-1000220","https://github.com/soyuka/pidusage/commit/b70eca15f7ca7f1b82a15f8a5d4bb48737f5a89d","https://github.com/soyuka/pidusage","https://web.archive.org/web/20201208183910/https://www.npmjs.com/advisories/356"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h2p3-h48h-9jj7","url":"https://osv.dev/vulnerability/GHSA-h2p3-h48h-9jj7"}],"summary":"PIDUsage Enables OS Command Injection"}