{"action":"Upgrade network to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"network","cve_ids":["CVE-2024-21488"],"ecosystem":"npm","epss":0.03302,"exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-vvh2-82c7-ppfg","id":"tcs_01M5KGD0X0H0BSBZ2X9KE9796E","modified_at":"2024-01-30T18:56:40.784372Z","published_at":"2024-01-30T06:30:23Z","references":["https://osv.dev/vulnerability/GHSA-vvh2-82c7-ppfg","https://nvd.nist.gov/vuln/detail/CVE-2024-21488","https://github.com/tomas/network/commit/5599ed6d6ff1571a5ccadea775430c131f381de7","https://github.com/tomas/network/commit/6ec8713580938ab4666df2f2d0f3399891ed2ad7","https://github.com/tomas/network/commit/72c523265940fe279eb0050d441522628f8988e5","https://gist.github.com/icemonster/282ab98fb68fc22aac7c576538f6369c","https://github.com/tomas/network","https://security.snyk.io/vuln/SNYK-JS-NETWORK-6184371"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-vvh2-82c7-ppfg","url":"https://osv.dev/vulnerability/GHSA-vvh2-82c7-ppfg"}],"summary":"network Arbitrary Command Injection vulnerability"}