{"action":"Upgrade @prisma/sdk to 2.20.0 or later.","affected":[{"fixed":"2.20.0","introduced":"0"}],"component":"@prisma/sdk","cve_ids":["CVE-2021-21414"],"ecosystem":"npm","epss":0.02073,"exploited":false,"fixed_versions":["2.20.0"],"ghsa_id":"GHSA-pxcc-hj8w-fmm7","id":"tcs_01M5KG4QE57RY6HJ5QPWM68EG2","modified_at":"2026-07-08T06:28:53.078287888Z","published_at":"2021-04-06T17:25:12Z","references":["https://osv.dev/vulnerability/GHSA-pxcc-hj8w-fmm7","https://github.com/prisma/prisma/security/advisories/GHSA-pxcc-hj8w-fmm7","https://nvd.nist.gov/vuln/detail/CVE-2021-21414","https://github.com/prisma/prisma/pull/6245","https://security.netapp.com/advisory/ntap-20210618-0003"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-pxcc-hj8w-fmm7","url":"https://osv.dev/vulnerability/GHSA-pxcc-hj8w-fmm7"}],"summary":"Command injection vulnerability in @prisma/sdk in getPackedPackage function"}