{"action":"Upgrade npmconf to 2.1.3 or later.","affected":[{"fixed":"2.1.3","introduced":"0"}],"component":"npmconf","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.1.3"],"ghsa_id":"GHSA-57cf-349j-352g","id":"tcs_01M5KF2X22N443HK8Q9HQSRBY8","modified_at":"2020-08-31T18:31:27Z","published_at":"2019-06-12T16:37:00Z","references":["https://osv.dev/vulnerability/GHSA-57cf-349j-352g","https://hackerone.com/reports/320269","https://www.npmjs.com/advisories/653"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-57cf-349j-352g","url":"https://osv.dev/vulnerability/GHSA-57cf-349j-352g"}],"summary":"Out-of-bounds Read in npmconf"}