{"action":"Upgrade is-my-json-valid to 1.4.1 or later.","affected":[{"fixed":"2.17.2","introduced":"2.0.0"},{"fixed":"1.4.1","introduced":"0"}],"component":"is-my-json-valid","cve_ids":["CVE-2018-1107"],"ecosystem":"npm","epss":0.01204,"exploited":false,"fixed_versions":["2.17.2","1.4.1"],"ghsa_id":"GHSA-4hpf-3wq7-5rpr","id":"tcs_01M5KF0KC9P8MNJHCP6HJC22DC","modified_at":"2023-11-08T03:59:45.221407Z","published_at":"2022-01-06T20:44:07Z","references":["https://osv.dev/vulnerability/GHSA-4hpf-3wq7-5rpr","https://nvd.nist.gov/vuln/detail/CVE-2018-1107","https://github.com/mafintosh/is-my-json-valid/pull/159","https://github.com/mafintosh/is-my-json-valid/commit/b3051b277f7caa08cd2edc6f74f50aeda65d2976","https://bugzilla.redhat.com/show_bug.cgi?id=1546357","https://snyk.io/vuln/npm:is-my-json-valid:20180214"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-4hpf-3wq7-5rpr","url":"https://osv.dev/vulnerability/GHSA-4hpf-3wq7-5rpr"}],"summary":"Regular expression deinal of service (ReDoS) in is-my-json-valid"}