{"action":"Upgrade dns-sync to 0.1.1 or later.","affected":[{"fixed":"0.1.1","introduced":"0"}],"component":"dns-sync","cve_ids":["CVE-2014-9682"],"ecosystem":"npm","epss":0.02843,"exploited":false,"fixed_versions":["0.1.1"],"ghsa_id":"GHSA-q5pq-pgrv-fh89","id":"tcs_01M5KG59RY8YKA0TFR5210QQE8","modified_at":"2023-11-08T03:57:47.247050Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-q5pq-pgrv-fh89","https://nvd.nist.gov/vuln/detail/CVE-2014-9682","https://github.com/skoranga/node-dns-sync/issues/1","https://github.com/skoranga/node-dns-sync/commit/d9abaae384b198db1095735ad9c1c73d7b890a0d","https://github.com/advisories/GHSA-q5pq-pgrv-fh89","https://github.com/skoranga/node-dns-sync","http://www.openwall.com/lists/oss-security/2014/11/11/6"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-q5pq-pgrv-fh89","url":"https://osv.dev/vulnerability/GHSA-q5pq-pgrv-fh89"}],"summary":"dns-sync command injection vulnerability"}