{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.5.2"}],"component":"web3","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-27v7-qhfv-rqq8","id":"tcs_01M5KESCKX7D44ZZ7BSQT06S7W","modified_at":"2021-08-31T20:56:47Z","published_at":"2019-05-30T17:26:30Z","references":["https://osv.dev/vulnerability/GHSA-27v7-qhfv-rqq8","https://github.com/ethereum/web3.js/issues/2739","https://github.com/ethereum/web3.js","https://snyk.io/vuln/SNYK-JS-WEB3-174533","https://www.npmjs.com/advisories/877"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-27v7-qhfv-rqq8","url":"https://osv.dev/vulnerability/GHSA-27v7-qhfv-rqq8"}],"summary":"Insecure Credential Storage in web3"}