{"action":"Upgrade private-ip to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"private-ip","cve_ids":["CVE-2020-28360"],"ecosystem":"npm","epss":0.03077,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-43ch-2h55-2vj7","id":"tcs_01M5KEYYREX46CFCSDYJXT4DCJ","modified_at":"2023-11-08T04:03:25.257857Z","published_at":"2021-04-13T15:18:17Z","references":["https://osv.dev/vulnerability/GHSA-43ch-2h55-2vj7","https://nvd.nist.gov/vuln/detail/CVE-2020-28360","https://github.com/frenchbread/private-ip/commit/840664c4b9ba7888c41cfee9666e9a593db133e9","https://github.com/frenchbread/private-ip","https://johnjhacking.com/blog/cve-2020-28360","https://www.npmjs.com/package/private-ip"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-43ch-2h55-2vj7","url":"https://osv.dev/vulnerability/GHSA-43ch-2h55-2vj7"}],"summary":"Server-Side Request Forgery in private-ip"}