{"action":"Upgrade samsung-remote to 1.3.5 or later.","affected":[{"fixed":"1.3.5","introduced":"0"}],"component":"samsung-remote","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.3.5"],"ghsa_id":"GHSA-xhjx-mfr6-9rr4","id":"tcs_01M5KGJ49MXCS4RSXCS08CJYHN","modified_at":"2020-08-31T18:33:52Z","published_at":"2020-09-01T21:20:28Z","references":["https://osv.dev/vulnerability/GHSA-xhjx-mfr6-9rr4","https://hackerone.com/reports/394294","https://github.com/nodejs/security-wg/blob/master/vuln/npm/465.json","https://www.npmjs.com/advisories/734"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-xhjx-mfr6-9rr4","url":"https://osv.dev/vulnerability/GHSA-xhjx-mfr6-9rr4"}],"summary":"Command Injection in samsung-remote"}