{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.3.0"}],"component":"git-it-electron","cve_ids":["CVE-2021-44685"],"ecosystem":"npm","epss":0.03467,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wjqc-j537-j9gj","id":"tcs_01M5KGF9TEDYQ7CB74Q6CZMCCK","modified_at":"2023-11-08T04:07:18.152020Z","published_at":"2021-12-08T00:01:44Z","references":["https://osv.dev/vulnerability/GHSA-wjqc-j537-j9gj","https://nvd.nist.gov/vuln/detail/CVE-2021-44685","https://github.com/dwisiswant0/advisory/issues/3","https://advisory.dw1.io/3","https://github.com/jlord/git-it-electron","https://github.com/jlord/git-it-electron/releases"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wjqc-j537-j9gj","url":"https://osv.dev/vulnerability/GHSA-wjqc-j537-j9gj"}],"summary":"Command injection in git-it-electron"}