{"action":"Upgrade gry to 6.0.0 or later.","affected":[{"fixed":"6.0.0","introduced":"0"}],"component":"gry","cve_ids":["CVE-2020-36650"],"ecosystem":"npm","epss":0.02185,"exploited":false,"fixed_versions":["6.0.0"],"ghsa_id":"GHSA-w5mw-f2hq-5fw8","id":"tcs_01M5KGE29HS5HDKM4B3K74AZRN","modified_at":"2023-11-08T04:03:49.026692Z","published_at":"2023-01-11T18:30:27Z","references":["https://osv.dev/vulnerability/GHSA-w5mw-f2hq-5fw8","https://nvd.nist.gov/vuln/detail/CVE-2020-36650","https://github.com/IonicaBizau/node-gry/pull/22","https://github.com/IonicaBizau/node-gry/commit/5108446c1e23960d65e8b973f1d9486f9f9dbd6c","https://github.com/IonicaBizau/node-gry","https://github.com/IonicaBizau/node-gry/releases/tag/6.0.0","https://vuldb.com/?ctiid.218019","https://vuldb.com/?id.218019"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-w5mw-f2hq-5fw8","url":"https://osv.dev/vulnerability/GHSA-w5mw-f2hq-5fw8"}],"summary":"gry vulnerable to Command Injection"}