{"action":"Upgrade hapi to 6.1.0 or later.","affected":[{"fixed":"6.1.0","introduced":"0"}],"component":"hapi","cve_ids":["CVE-2014-4671"],"ecosystem":"npm","epss":0.22011,"exploited":false,"fixed_versions":["6.1.0"],"ghsa_id":"GHSA-363h-vj6q-3cmj","id":"tcs_01M5KEW52ECND6FSPP85FK43TK","modified_at":"2023-11-08T03:57:42.033038Z","published_at":"2020-08-31T22:45:35Z","references":["https://osv.dev/vulnerability/GHSA-363h-vj6q-3cmj","https://nvd.nist.gov/vuln/detail/CVE-2014-4671","https://github.com/spumko/hapi/pull/1766","https://github.com/hapijs/hapi/commit/d47f57abf23bdaa84f61aed2bac94ae5f358afb7","https://github.com/patrickkettner","https://github.com/spumko/hapi","https://www.npmjs.com/advisories/12","http://helpx.adobe.com/security/products/flash-player/apsb14-17.html","http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash","http://rhn.redhat.com/errata/RHSA-2014-0860.html","http://secunia.com/advisories/59774","http://secunia.com/advisories/59837","http://security.gentoo.org/glsa/glsa-201407-02.xml","http://www.securityfocus.com/bid/68457","http://www.securitytracker.com/id/1030533"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-363h-vj6q-3cmj","url":"https://osv.dev/vulnerability/GHSA-363h-vj6q-3cmj"}],"summary":"Rosetta-Flash JSONP Vulnerability in hapi"}