{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.14.1"}],"component":"appium-desktop","cve_ids":["CVE-2023-2479"],"ecosystem":"npm","epss":0.22014,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xq6j-x8pq-g3gr","id":"tcs_01M5KGJK5A6MQCS27X2CPSR061","modified_at":"2023-11-08T04:11:48.573630Z","published_at":"2023-05-02T15:30:34Z","references":["https://osv.dev/vulnerability/GHSA-xq6j-x8pq-g3gr","https://nvd.nist.gov/vuln/detail/CVE-2023-2479","https://github.com/appium/appium-desktop/commit/12a988aa08b9822e97056a09486c9bebb3aad8fe","https://github.com/appium/appium-desktop","https://huntr.dev/bounties/fbdeec3c-d197-4a68-a547-7f93fb9594b4"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xq6j-x8pq-g3gr","url":"https://osv.dev/vulnerability/GHSA-xq6j-x8pq-g3gr"}],"summary":"appium-desktop OS Command Injection vulnerability"}