{"action":"Upgrade @napi-rs/image to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"@napi-rs/image","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-4vjr-crvh-383h","id":"tcs_01M5KF1HHMNKSR68ZK4Q3FCWEW","modified_at":"2023-09-27T20:17:00Z","published_at":"2023-09-27T20:17:00Z","references":["https://osv.dev/vulnerability/GHSA-4vjr-crvh-383h","https://github.com/Brooooooklyn/Image/security/advisories/GHSA-4vjr-crvh-383h","https://github.com/Brooooooklyn/Image/commit/aa07979f6cd0c534a8befea87fac1210a3b621c1","https://blog.isosceles.com/the-webp-0day","https://github.com/Brooooooklyn/Image","https://github.com/Brooooooklyn/Image/releases/tag/%40napi-rs%2Fimage%401.7.0","https://github.com/advisories/GHSA-j7hp-h8jx-5ppr"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-4vjr-crvh-383h","url":"https://osv.dev/vulnerability/GHSA-4vjr-crvh-383h"}],"summary":"@napi-rs/image affected by libwebp CVE"}