{"action":"Upgrade react-native-reanimated to 2.10.0 or later.","affected":[{"fixed":"2.10.0","introduced":"0"}],"component":"react-native-reanimated","cve_ids":["CVE-2022-24373"],"ecosystem":"npm","epss":0.01637,"exploited":false,"fixed_versions":["2.10.0"],"ghsa_id":"GHSA-2j79-8pqc-r7x6","id":"tcs_01M5KETBXW307C0EVERHSXTDM1","modified_at":"2023-11-08T04:08:30.865103Z","published_at":"2022-10-01T00:00:24Z","references":["https://osv.dev/vulnerability/GHSA-2j79-8pqc-r7x6","https://nvd.nist.gov/vuln/detail/CVE-2022-24373","https://github.com/software-mansion/react-native-reanimated/pull/3382","https://github.com/software-mansion/react-native-reanimated/pull/3382/commits/7adf06d0c59382d884a04be86a96eede3d0432fa","https://github.com/software-mansion/react-native-reanimated/commit/8a927904366fa2d02df7a11553f8b0aa93471279","https://github.com/software-mansion/react-native-reanimated","https://github.com/software-mansion/react-native-reanimated/compare/2.9.1...2.10.0","https://github.com/software-mansion/react-native-reanimated/releases/tag/3.0.0-rc.1","https://security.snyk.io/vuln/SNYK-JS-REACTNATIVEREANIMATED-2949507"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2j79-8pqc-r7x6","url":"https://osv.dev/vulnerability/GHSA-2j79-8pqc-r7x6"}],"summary":"react-native-reanimated vulnerable to ReDoS"}