{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.2"}],"component":"ps-visitor","cve_ids":["CVE-2021-23374"],"ecosystem":"npm","epss":0.01336,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v2jv-33gh-xx29","id":"tcs_01M5KGADTVC3SAF0CRAGY2HVN7","modified_at":"2026-03-13T21:56:25.660706Z","published_at":"2021-05-07T16:06:23Z","references":["https://osv.dev/vulnerability/GHSA-v2jv-33gh-xx29","https://nvd.nist.gov/vuln/detail/CVE-2021-23374","https://github.com/WisdomKwan/ps-visitor","https://github.com/WisdomKwan/ps-visitor/blob/cdfc934a8e4af95aa0473f4b2a4bd091d09faf2f/index.js#23L404","https://snyk.io/vuln/SNYK-JS-PSVISITOR-1078544"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v2jv-33gh-xx29","url":"https://osv.dev/vulnerability/GHSA-v2jv-33gh-xx29"}],"summary":"Command Injection in ps-visitor"}