{"action":"Upgrade strapi to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"0"}],"component":"strapi","cve_ids":["CVE-2022-0764"],"ecosystem":"npm","epss":0.00734,"exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-xrjf-phvv-r4vr","id":"tcs_01M5KGJSB8NW699NBMB3HFRX3R","modified_at":"2023-11-08T04:07:40.230520Z","published_at":"2022-02-27T00:00:15Z","references":["https://osv.dev/vulnerability/GHSA-xrjf-phvv-r4vr","https://nvd.nist.gov/vuln/detail/CVE-2022-0764","https://github.com/strapi/strapi/issues/12879","https://github.com/strapi/strapi/commit/2a3f5e988be6a2c7dae5ac22b9e86d579b462f4c","https://github.com/strapi/strapi","https://github.com/strapi/strapi/blob/master/packages/generators/app/lib/utils/fetch-npm-template.js#L13","https://huntr.dev/bounties/001d1c29-805a-4035-93bb-71a0e81da3e5","https://www.github.com/strapi/strapi/commit/2a3f5e988be6a2c7dae5ac22b9e86d579b462f4c"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xrjf-phvv-r4vr","url":"https://osv.dev/vulnerability/GHSA-xrjf-phvv-r4vr"}],"summary":"Command injection in strapi"}