{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.3"}],"component":"npos-tesseract","cve_ids":["CVE-2020-28453"],"ecosystem":"npm","epss":0.01329,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mpwp-pf96-9g4r","id":"tcs_01M5KG1CXW1PBBH11MM55FEJ6S","modified_at":"2023-11-08T04:03:26.956314Z","published_at":"2022-08-03T00:00:57Z","references":["https://osv.dev/vulnerability/GHSA-mpwp-pf96-9g4r","https://nvd.nist.gov/vuln/detail/CVE-2020-28453","https://github.com/taoyuan/npos-tesseract","https://security.snyk.io/vuln/SNYK-JS-NPOSTESSERACT-1051031"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mpwp-pf96-9g4r","url":"https://osv.dev/vulnerability/GHSA-mpwp-pf96-9g4r"}],"summary":"npos-tesseract Command Injection vulnerability"}