{"action":"Upgrade lifion-verify-deps to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"lifion-verify-deps","cve_ids":["CVE-2021-34078"],"ecosystem":"npm","epss":0.02409,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-rphm-c8gw-3r38","id":"tcs_01M5KG9J5KG1D8ZYY23X7S2MDD","modified_at":"2023-11-08T04:06:06.902895Z","published_at":"2022-06-03T00:00:58Z","references":["https://osv.dev/vulnerability/GHSA-rphm-c8gw-3r38","https://nvd.nist.gov/vuln/detail/CVE-2021-34078","https://github.com/lifion/lifion-verify-deps/commit/be1133d5b78e3caa0004fa60207013dca4e1bf38","https://advisory.checkmarx.net/advisory/CX-2021-4785","https://github.com/lifion/lifion-verify-deps"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-rphm-c8gw-3r38","url":"https://osv.dev/vulnerability/GHSA-rphm-c8gw-3r38"}],"summary":"OS Command Injection in lifion-verify-deps"}