{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.0.7"}],"component":"@ifnotnowwhen/promptr","cve_ids":["CVE-2024-46489"],"ecosystem":"npm","epss":0.00979,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hwxp-6qf7-q3rc","id":"tcs_01M5KFWBPYMF4KKZEC39CXA095","modified_at":"2024-09-26T22:42:12.901958Z","published_at":"2024-09-25T18:31:21Z","references":["https://osv.dev/vulnerability/GHSA-hwxp-6qf7-q3rc","https://nvd.nist.gov/vuln/detail/CVE-2024-46489","https://github.com/VulnSphere/LLMVulnSphere/blob/main/Prompt/promptr/RCE_FC_6.0.7.md","https://github.com/ferrislucas/promptr"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-hwxp-6qf7-q3rc","url":"https://osv.dev/vulnerability/GHSA-hwxp-6qf7-q3rc"}],"summary":"Remote command execution in promptr"}