{"action":"Upgrade typed-function to 0.10.6 or later.","affected":[{"fixed":"0.10.6","introduced":"0"}],"component":"typed-function","cve_ids":["CVE-2017-1001004"],"ecosystem":"npm","epss":0.01884,"exploited":false,"fixed_versions":["0.10.6"],"ghsa_id":"GHSA-3qh4-r86r-grvm","id":"tcs_01M5KEY358TTZBRX2VF946KZEH","modified_at":"2023-11-08T03:58:48.131161Z","published_at":"2020-09-02T18:24:39Z","references":["https://osv.dev/vulnerability/GHSA-3qh4-r86r-grvm","https://nvd.nist.gov/vuln/detail/CVE-2017-1001004","https://github.com/josdejong/typed-function/commit/6478ef4f2c3f3c2d9f2c820e2db4b4ba3425e6fe","https://github.com/josdejong/typed-function/commit/6478ef4f2c3f3c2d9f2c820e2db4b4ba3425e6fe?diff=split#diff-9e1f22c2954a38db1fdf444dbc74e0a8","https://github.com/josdejong/typed-function/blob/master/HISTORY.md#2017-11-18-version-0106","https://snyk.io/vuln/SNYK-JS-TYPEDFUNCTION-174139","https://www.npmjs.com/advisories/819"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-3qh4-r86r-grvm","url":"https://osv.dev/vulnerability/GHSA-3qh4-r86r-grvm"},{"source":"nvd","source_id":"CVE-2017-1001004","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1001004"}],"summary":"Arbitrary JavaScript Execution in typed-function"}