{"action":"Upgrade node-uuid to 1.4.4 or later.","affected":[{"fixed":"1.4.4","introduced":"0"}],"component":"node-uuid","cve_ids":["CVE-2015-8851"],"ecosystem":"npm","epss":0.02257,"exploited":false,"fixed_versions":["1.4.4"],"ghsa_id":"GHSA-265q-28rp-chq5","id":"tcs_01M5KES3EP4NGFACWN6FFZ88ZZ","modified_at":"2023-11-08T03:58:03.317446Z","published_at":"2020-04-16T03:14:50Z","references":["https://osv.dev/vulnerability/GHSA-265q-28rp-chq5","https://nvd.nist.gov/vuln/detail/CVE-2015-8851","https://github.com/broofa/node-uuid/issues/108","https://github.com/broofa/node-uuid/issues/122","https://github.com/broofa/node-uuid/commit/672f3834ed02c798aa021c618d0a5666c8da000d","https://bugzilla.redhat.com/show_bug.cgi?id=1327056","https://www.npmjs.com/advisories/93","http://www.openwall.com/lists/oss-security/2016/04/13/8"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-265q-28rp-chq5","url":"https://osv.dev/vulnerability/GHSA-265q-28rp-chq5"}],"summary":"Insecure Entropy Source - Math.random() in node-uuid"}