{"action":"Upgrade hubot-scripts to 2.4.5 or later.","affected":[{"fixed":"2.4.5","introduced":"0"}],"component":"hubot-scripts","cve_ids":["CVE-2013-7378"],"ecosystem":"npm","epss":0.02685,"exploited":false,"fixed_versions":["2.4.5"],"ghsa_id":"GHSA-hwch-749c-rv63","id":"tcs_01M5KFW8X89QA6YWRAJ5MYZ426","modified_at":"2023-11-08T03:57:28.997653Z","published_at":"2020-08-31T22:46:38Z","references":["https://osv.dev/vulnerability/GHSA-hwch-749c-rv63","https://nvd.nist.gov/vuln/detail/CVE-2013-7378","https://github.com/github/hubot-scripts/commit/feee5abdb038a229a98969ae443cdb8a61747782","https://www.npmjs.com/advisories/13","http://www.openwall.com/lists/oss-security/2014/05/13/1","http://www.openwall.com/lists/oss-security/2014/05/15/2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hwch-749c-rv63","url":"https://osv.dev/vulnerability/GHSA-hwch-749c-rv63"}],"summary":"Potential Command Injection in hubot-scripts"}