{"action":"Upgrade harp to 0.40.2 or later.","affected":[{"fixed":"0.40.2","introduced":"0"}],"component":"harp","cve_ids":["CVE-2019-5437"],"ecosystem":"npm","epss":0.01313,"exploited":false,"fixed_versions":["0.40.2"],"ghsa_id":"GHSA-46hv-7769-j7rx","id":"tcs_01M5KEZK1SR6BX27CFYA52DB5X","modified_at":"2023-11-08T04:01:36.165453Z","published_at":"2019-06-13T16:12:22Z","references":["https://osv.dev/vulnerability/GHSA-46hv-7769-j7rx","https://nvd.nist.gov/vuln/detail/CVE-2019-5437","https://github.com/sintaxi/harp/commit/1ec790baeeb2bfdb4584f1998af3d10a8fa31210","https://hackerone.com/reports/453820","https://www.npmjs.com/advisories/807"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-46hv-7769-j7rx","url":"https://osv.dev/vulnerability/GHSA-46hv-7769-j7rx"}],"summary":"Unauthorized File Access in harp"}