{"action":"Upgrade hosted-git-info to 2.8.9 or later.","affected":[{"fixed":"2.8.9","introduced":"0"},{"fixed":"3.0.8","introduced":"3.0.0"}],"component":"hosted-git-info","cve_ids":["CVE-2021-23362"],"ecosystem":"npm","epss":0.03612,"exploited":false,"fixed_versions":["2.8.9","3.0.8"],"ghsa_id":"GHSA-43f8-2h32-f4cj","id":"tcs_01M5KEYZ9Q5RDBHY4ZC1K1BGJY","modified_at":"2025-01-14T08:57:25.609462Z","published_at":"2021-05-06T16:10:39Z","references":["https://osv.dev/vulnerability/GHSA-43f8-2h32-f4cj","https://nvd.nist.gov/vuln/detail/CVE-2021-23362","https://github.com/npm/hosted-git-info/pull/76","https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7","https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01","https://github.com/npm/hosted-git-info/commit/bede0dc38e1785e732bf0a48ba6f81a4a908eba3","https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","https://github.com/npm/hosted-git-info","https://github.com/npm/hosted-git-info/commits/v2","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1088356","https://snyk.io/vuln/SNYK-JS-HOSTEDGITINFO-1088355"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-43f8-2h32-f4cj","url":"https://osv.dev/vulnerability/GHSA-43f8-2h32-f4cj"}],"summary":"Regular Expression Denial of Service in hosted-git-info"}