{"action":"Upgrade @acrontum/filesystem-template to 0.0.2 or later.","affected":[{"fixed":"0.0.2","introduced":"0"}],"component":"@acrontum/filesystem-template","cve_ids":["CVE-2022-21186"],"ecosystem":"npm","epss":0.26074,"exploited":false,"fixed_versions":["0.0.2"],"ghsa_id":"GHSA-m2fc-9h5m-29cm","id":"tcs_01M5KFZB9S6XHD8SDK6A47T33P","modified_at":"2023-11-08T04:08:04.469250Z","published_at":"2022-08-06T00:00:51Z","references":["https://osv.dev/vulnerability/GHSA-m2fc-9h5m-29cm","https://nvd.nist.gov/vuln/detail/CVE-2022-21186","https://github.com/acrontum/filesystem-template/issues/13","https://github.com/acrontum/filesystem-template/pull/14/commits/baeb727b60991ad82d9e63ac660883793abc0acc","https://github.com/acrontum/filesystem-template/commit/baeb727b60991ad82d9e63ac660883793abc0acc","https://github.com/acrontum/filesystem-template","https://security.snyk.io/vuln/SNYK-JS-ACRONTUMFILESYSTEMTEMPLATE-2419071"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m2fc-9h5m-29cm","url":"https://osv.dev/vulnerability/GHSA-m2fc-9h5m-29cm"}],"summary":"@acrontum/filesystem-template vulnerable to Command Injection due to fetchRepo API missing sanitization"}