{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.7"}],"component":"roar-pidusage","cve_ids":["CVE-2021-23380"],"ecosystem":"npm","epss":0.01161,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xfxf-qw26-hr33","id":"tcs_01M5KGHWVWJV1TZJBZM9EEDGFT","modified_at":"2023-11-08T04:05:06.228033Z","published_at":"2021-05-06T15:55:43Z","references":["https://osv.dev/vulnerability/GHSA-xfxf-qw26-hr33","https://nvd.nist.gov/vuln/detail/CVE-2021-23380","https://github.com/Svjard/pidusage","https://github.com/Svjard/pidusage/blob/772cd2bd675ff7b1244b6fe3d7541692b1b9e42c/lib/stats.js%23L103","https://snyk.io/vuln/SNYK-JS-ROARPIDUSAGE-1078528"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-xfxf-qw26-hr33","url":"https://osv.dev/vulnerability/GHSA-xfxf-qw26-hr33"}],"summary":"Arbitrary command execution in roar-pidusage"}