{"action":"Upgrade global-modules-path to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"global-modules-path","cve_ids":["CVE-2022-21191"],"ecosystem":"npm","epss":0.01545,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-vvj3-85vf-fgmw","id":"tcs_01M5KGD1B12JZQZV16N3YA0C24","modified_at":"2025-04-04T19:33:44Z","published_at":"2023-01-13T06:30:22Z","references":["https://osv.dev/vulnerability/GHSA-vvj3-85vf-fgmw","https://nvd.nist.gov/vuln/detail/CVE-2022-21191","https://github.com/rosen-vladimirov/global-modules-path/commit/edbdaff077ea0cf295b1469923c06bbccad3c180","https://github.com/lorenzomigliorero/npm-node-utils/blob/b55dd81c597db657c9751332bb2242403fd3e26b/index.js%23L186","https://github.com/rosen-vladimirov/global-modules-path","https://github.com/rosen-vladimirov/global-modules-path/releases/tag/v3.0.0","https://security.snyk.io/vuln/SNYK-JS-GLOBALMODULESPATH-3167973"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vvj3-85vf-fgmw","url":"https://osv.dev/vulnerability/GHSA-vvj3-85vf-fgmw"}],"summary":"global-modules-path Command Injection vulnerability"}