{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.1"}],"component":"geojson2kml","cve_ids":["CVE-2020-28429"],"ecosystem":"npm","epss":0.63305,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w83x-fp72-p9qc","id":"tcs_01M5KGEDJP5QQR4QH6W0RP230V","modified_at":"2023-11-08T04:03:25.804876Z","published_at":"2021-05-10T15:59:33Z","references":["https://osv.dev/vulnerability/GHSA-w83x-fp72-p9qc","https://nvd.nist.gov/vuln/detail/CVE-2020-28429","https://snyk.io/vuln/SNYK-JS-GEOJSON2KML-1050412"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w83x-fp72-p9qc","url":"https://osv.dev/vulnerability/GHSA-w83x-fp72-p9qc"}],"summary":"Command Injection in geojson2kml"}