{"action":"Upgrade logkitty to 0.7.1 or later.","affected":[{"fixed":"0.7.1","introduced":"0"}],"component":"logkitty","cve_ids":["CVE-2020-8149"],"ecosystem":"npm","epss":0.0201,"exploited":false,"fixed_versions":["0.7.1"],"ghsa_id":"GHSA-v8v8-6859-qxm4","id":"tcs_01M5KGBA7HA2FXMHX8KMKVSDEQ","modified_at":"2023-11-08T04:04:14.382208Z","published_at":"2020-06-05T14:47:02Z","references":["https://osv.dev/vulnerability/GHSA-v8v8-6859-qxm4","https://nvd.nist.gov/vuln/detail/CVE-2020-8149","https://github.com/zamotany/logkitty/pull/18","https://github.com/zamotany/logkitty/commit/ef2f673e25c629544dd3de6429999318447dd6bf","https://hackerone.com/reports/825729"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v8v8-6859-qxm4","url":"https://osv.dev/vulnerability/GHSA-v8v8-6859-qxm4"}],"summary":"Arbitrary shell command execution in logkitty"}