{"action":"Upgrade @worker-tools/stripe-webhook to 1.1.4 or later.","affected":[{"fixed":"1.1.4","introduced":"0"}],"component":"@worker-tools/stripe-webhook","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.1.4"],"ghsa_id":"GHSA-4g53-vp7q-gfjv","id":"tcs_01M5KF09DAWMYNYE1SV01Z6QV6","modified_at":"2021-05-27T22:24:49Z","published_at":"2021-05-28T19:18:28Z","references":["https://osv.dev/vulnerability/GHSA-4g53-vp7q-gfjv","https://github.com/worker-tools/stripe-webhook/security/advisories/GHSA-4g53-vp7q-gfjv"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-4g53-vp7q-gfjv","url":"https://osv.dev/vulnerability/GHSA-4g53-vp7q-gfjv"}],"summary":"constructEvent does not verify header"}