{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0"}],"component":"pandora-doomsday","cve_ids":["CVE-2017-16127"],"ecosystem":"npm","epss":0.01432,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-428f-mh7w-6w2x","id":"tcs_01M5KEYSR4XEPH67F1NSMDNZDK","modified_at":"2023-11-08T03:59:06.437046Z","published_at":"2020-09-01T18:56:40Z","references":["https://osv.dev/vulnerability/GHSA-428f-mh7w-6w2x","https://nvd.nist.gov/vuln/detail/CVE-2017-16127","https://www.npmjs.com/advisories/482"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-428f-mh7w-6w2x","url":"https://osv.dev/vulnerability/GHSA-428f-mh7w-6w2x"}],"summary":"pandora-doomsday is malware"}