{"action":"Upgrade react-datepicker-plus to 2.4.6 or later.","affected":[{"fixed":"2.4.6","introduced":"2.4.2"}],"component":"react-datepicker-plus","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.4.6"],"ghsa_id":"GHSA-4wcx-c9c4-89p2","id":"tcs_01M5KF1R9FB8W9HP3322VG5Z54","modified_at":"2021-09-30T22:08:42Z","published_at":"2020-09-11T21:23:30Z","references":["https://osv.dev/vulnerability/GHSA-4wcx-c9c4-89p2","https://www.npmjs.com/advisories/946"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4wcx-c9c4-89p2","url":"https://osv.dev/vulnerability/GHSA-4wcx-c9c4-89p2"}],"summary":"Malicious Package in react-datepicker-plus"}