{"action":"Upgrade connect to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"connect","cve_ids":["CVE-2013-7370"],"ecosystem":"npm","epss":0.01417,"exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-3fw8-66wf-pr7m","id":"tcs_01M5KEX81MBNTAT7QHN43ARB6P","modified_at":"2023-11-08T03:57:28.815077Z","published_at":"2020-08-31T22:41:27Z","references":["https://osv.dev/vulnerability/GHSA-3fw8-66wf-pr7m","https://nvd.nist.gov/vuln/detail/CVE-2013-7370","https://github.com/senchalabs/connect/issues/831","https://github.com/senchalabs/connect/commit/126187c4e12162e231b87350740045e5bb06e93a","https://github.com/senchalabs/connect/commit/277e5aad6a95d00f55571a9a0e11f2fa190d8135","https://access.redhat.com/security/cve/cve-2013-7370","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-7370","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-7370","https://security-tracker.debian.org/tracker/CVE-2013-7370","https://www.npmjs.com/advisories/3","http://www.openwall.com/lists/oss-security/2014/04/21/2","http://www.openwall.com/lists/oss-security/2014/05/13/1"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-3fw8-66wf-pr7m","url":"https://osv.dev/vulnerability/GHSA-3fw8-66wf-pr7m"}],"summary":"methodOverride Middleware Reflected Cross-Site Scripting in connect"}