{"action":"Upgrade deno to 1.44.1 or later.","affected":[{"fixed":"1.44.1","introduced":"1.44.0"}],"component":"deno","cve_ids":["CVE-2024-37150"],"ecosystem":"deno","exploited":false,"fixed_versions":["1.44.1"],"ghsa_id":"GHSA-rfc6-h225-3vxv","id":"tcs_01M5K4YJSYW1WY555C8CVH4VTJ","modified_at":"2024-06-06T14:27:18Z","published_at":"2024-06-06T14:27:18Z","references":["https://github.com/denoland/deno/security/advisories/GHSA-rfc6-h225-3vxv","https://www.cve.org/CVERecord?id=CVE-2024-37150"],"severity":{"label":"high","score":7.6},"sources":[{"source":"deno-runtime","source_id":"GHSA-rfc6-h225-3vxv","url":"https://github.com/denoland/deno/security/advisories/GHSA-rfc6-h225-3vxv"}],"summary":"Private npm registry support used scope auth token for downloading tarballs"}