{"action":"Upgrade git-interface to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"0"}],"component":"git-interface","cve_ids":["CVE-2022-1440"],"ecosystem":"npm","epss":0.03691,"exploited":false,"fixed_versions":["2.1.2"],"ghsa_id":"GHSA-qffw-8wg7-h665","id":"tcs_01M5KG60DEJHN1W5AKX1C5CETS","modified_at":"2023-11-08T04:07:49.055507Z","published_at":"2022-04-23T00:03:01Z","references":["https://osv.dev/vulnerability/GHSA-qffw-8wg7-h665","https://nvd.nist.gov/vuln/detail/CVE-2022-1440","https://github.com/yarkeev/git-interface/commit/f828aa790016fee3aa667f7b44cf94bf0aa8c60d","https://github.com/yarkeev/git-interface","https://huntr.dev/bounties/cdc25408-d3c1-4a9d-bb45-33b12a715ca1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qffw-8wg7-h665","url":"https://osv.dev/vulnerability/GHSA-qffw-8wg7-h665"}],"summary":"Command injection in git-interface"}