{"action":"Upgrade engine.io to 4.1.2 or later.","affected":[{"fixed":"4.1.2","introduced":"4.0.0"},{"fixed":"5.2.1","introduced":"5.0.0"},{"fixed":"6.1.1","introduced":"6.0.0"}],"component":"engine.io","cve_ids":["CVE-2022-21676"],"ecosystem":"npm","epss":0.0276,"exploited":false,"fixed_versions":["4.1.2","5.2.1","6.1.1"],"ghsa_id":"GHSA-273r-mgr4-v34f","id":"tcs_01M5KES74Y802JH9N3XDFH7YFZ","modified_at":"2023-11-08T04:08:07.289618Z","published_at":"2022-01-13T16:14:17Z","references":["https://osv.dev/vulnerability/GHSA-273r-mgr4-v34f","https://github.com/socketio/engine.io/security/advisories/GHSA-273r-mgr4-v34f","https://nvd.nist.gov/vuln/detail/CVE-2022-21676","https://github.com/socketio/engine.io/commit/66f889fc1d966bf5bfa0de1939069153643874ab","https://github.com/socketio/engine.io/commit/a70800d7e96da32f6e6622804ef659ebc58659db","https://github.com/socketio/engine.io/commit/c0e194d44933bd83bf9a4b126fca68ba7bf5098c","https://github.com/socketio/engine.io","https://github.com/socketio/engine.io/releases/tag/4.1.2","https://github.com/socketio/engine.io/releases/tag/5.2.1","https://github.com/socketio/engine.io/releases/tag/6.1.1","https://security.netapp.com/advisory/ntap-20220209-0002"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-273r-mgr4-v34f","url":"https://osv.dev/vulnerability/GHSA-273r-mgr4-v34f"}],"summary":"Uncaught Exception in engine.io"}