{"action":"Upgrade another-date-picker to 2.0.45 or later.","affected":[{"fixed":"2.0.45","introduced":"2.0.43"}],"component":"another-date-picker","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.45"],"ghsa_id":"GHSA-2p62-c4rm-mr72","id":"tcs_01M5KETQH5DSE6E7CCDAQXXV46","modified_at":"2023-12-07T22:04:42Z","published_at":"2020-09-01T19:44:57Z","references":["https://osv.dev/vulnerability/GHSA-2p62-c4rm-mr72","https://github.com/bi-a/mydatepicker","https://github.com/kekeh/mydatepicker","https://snyk.io/vuln/SNYK-JS-ANOTHERDATEPICKER-451013","https://www.npmjs.com/advisories/616"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2p62-c4rm-mr72","url":"https://osv.dev/vulnerability/GHSA-2p62-c4rm-mr72"}],"summary":"Malicious Package in another-date-picker"}