{"action":"Upgrade bson to 1.1.4 or later.","affected":[{"fixed":"1.1.4","introduced":"0"}],"component":"bson","cve_ids":["CVE-2019-2391"],"ecosystem":"npm","epss":0.00766,"exploited":false,"fixed_versions":["1.1.4"],"ghsa_id":"GHSA-4jwp-vfvf-657p","id":"tcs_01M5KF0W3JSVFJ8CS8MCZ232EA","modified_at":"2023-11-08T04:01:31.793786Z","published_at":"2022-02-10T23:30:20Z","references":["https://osv.dev/vulnerability/GHSA-4jwp-vfvf-657p","https://nvd.nist.gov/vuln/detail/CVE-2019-2391","https://github.com/mongodb/js-bson","https://github.com/mongodb/js-bson/releases/tag/v1.1.4"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-4jwp-vfvf-657p","url":"https://osv.dev/vulnerability/GHSA-4jwp-vfvf-657p"}],"summary":"Deserialization of Untrusted Data in bson"}