{"action":"Upgrade ntesseract to 0.2.9 or later.","affected":[{"fixed":"0.2.9","introduced":"0"}],"component":"ntesseract","cve_ids":["CVE-2020-28446"],"ecosystem":"npm","epss":0.03522,"exploited":false,"fixed_versions":["0.2.9"],"ghsa_id":"GHSA-w868-4576-rv24","id":"tcs_01M5KGEENE0CVXW2KQ98TK0N1K","modified_at":"2023-11-08T04:03:26.531860Z","published_at":"2022-07-26T00:01:05Z","references":["https://osv.dev/vulnerability/GHSA-w868-4576-rv24","https://nvd.nist.gov/vuln/detail/CVE-2020-28446","https://github.com/taoyuan/ntesseract/commit/fcbc36f381798b4362179c0cdf9961b437c7b619","https://github.com/taoyuan/ntesseract","https://security.snyk.io/vuln/SNYK-JS-NTESSERACT-1050982"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-w868-4576-rv24","url":"https://osv.dev/vulnerability/GHSA-w868-4576-rv24"}],"summary":"ntesseract vulnerable to Command Injection"}