{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0"}],"component":"vscode-npm-script","cve_ids":["CVE-2021-26700"],"ecosystem":"npm","epss":0.06003,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r84v-qff8-jv5g","id":"tcs_01M5KG8EBPAN4HZRR1XBN91S2W","modified_at":"2023-11-08T04:05:22.033958Z","published_at":"2022-05-24T17:43:20Z","references":["https://osv.dev/vulnerability/GHSA-r84v-qff8-jv5g","https://nvd.nist.gov/vuln/detail/CVE-2021-26700","https://github.com/microsoft/vscode-npm-scripts","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26700"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-r84v-qff8-jv5g","url":"https://osv.dev/vulnerability/GHSA-r84v-qff8-jv5g"}],"summary":"Remote code execution in vscode-npm-script"}