Severity: Critical
CVSS Score: 9.8
OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.