{"action":"No fix published. Pin and monitor.","affected":[],"component":"@opensearch-project/opensearch","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-27f5-xjrr-q9ff","id":"tcs_01M5KES9Q9XYXESCP476XQ242T","modified_at":"2026-09-10T03:50:45.193673519Z","published_at":"2026-05-19T14:35:05Z","references":["https://osv.dev/vulnerability/GHSA-27f5-xjrr-q9ff","https://github.com/opensearch-project/opensearch-js/security/advisories/GHSA-27f5-xjrr-q9ff","https://github.com/opensearch-project/opensearch-js"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-27f5-xjrr-q9ff","url":"https://osv.dev/vulnerability/GHSA-27f5-xjrr-q9ff"}],"summary":"Malware in @opensearch-project/opensearch"}