{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.3.0"}],"component":"npm-dependency-versions","cve_ids":["CVE-2022-29080"],"ecosystem":"npm","epss":0.02183,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m7xq-8jp8-rj2c","id":"tcs_01M5KG02728K3CMXQ25CZAW0D2","modified_at":"2023-11-08T04:09:08.005439Z","published_at":"2022-04-13T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-m7xq-8jp8-rj2c","https://nvd.nist.gov/vuln/detail/CVE-2022-29080","https://github.com/barneycarroll/npm-dependency-versions/issues/6","https://github.com/barneycarroll/npm-dependency-versions","https://www.npmjs.com/package/npm-dependency-versions"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m7xq-8jp8-rj2c","url":"https://osv.dev/vulnerability/GHSA-m7xq-8jp8-rj2c"}],"summary":"Command injection in npm-dependency-versions"}