{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.1"}],"component":"get-git-data","cve_ids":["CVE-2020-7619"],"ecosystem":"npm","epss":0.02175,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wj6h-7chw-x4h2","id":"tcs_01M5KGF832MES95ACDE5FKQAZ5","modified_at":"2026-07-06T16:00:12.987001207Z","published_at":"2021-05-10T15:59:14Z","references":["https://osv.dev/vulnerability/GHSA-wj6h-7chw-x4h2","https://nvd.nist.gov/vuln/detail/CVE-2020-7619","https://github.com/chardos/get-git-data/blob/master/index.js#L7","https://snyk.io/vuln/SNYK-JS-GETGITDATA-564222"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wj6h-7chw-x4h2","url":"https://osv.dev/vulnerability/GHSA-wj6h-7chw-x4h2"}],"summary":"Command injection in get-git-data"}