{"action":"Upgrade bassmaster to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"bassmaster","cve_ids":["CVE-2014-7205"],"ecosystem":"npm","epss":0.78582,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-5j3g-jfq3-7jwx","id":"tcs_01M5KF3YWV4SD77VFSKX8HX5WQ","modified_at":"2023-11-08T03:57:44.675724Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-5j3g-jfq3-7jwx","https://nvd.nist.gov/vuln/detail/CVE-2014-7205","https://github.com/hapijs/bassmaster/commit/b751602d8cb7194ee62a61e085069679525138c4","https://exchange.xforce.ibmcloud.com/vulnerabilities/96730","https://github.com/advisories/GHSA-5j3g-jfq3-7jwx","https://github.com/hapijs/bassmaster","https://www.exploit-db.com/exploits/40689","https://www.npmjs.com/advisories/1","http://www.openwall.com/lists/oss-security/2014/09/30/10","http://www.securityfocus.com/bid/70180"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-5j3g-jfq3-7jwx","url":"https://osv.dev/vulnerability/GHSA-5j3g-jfq3-7jwx"}],"summary":"Arbitrary JavaScript Execution in bassmaster"}