{"action":"Upgrade simple-crypto-js to 2.3.0 or later.","affected":[{"fixed":"2.3.0","introduced":"0"}],"component":"simple-crypto-js","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.3.0"],"ghsa_id":"GHSA-5v7r-jg9r-vq44","id":"tcs_01M5KF4QW0MZHKQXTK88NZAJAN","modified_at":"2021-09-29T20:08:01Z","published_at":"2020-09-03T21:19:46Z","references":["https://osv.dev/vulnerability/GHSA-5v7r-jg9r-vq44","https://github.com/danang-id/simple-crypto-js/issues/12","https://github.com/danang-id/simple-crypto-js/pull/17","https://github.com/danang-id/simple-crypto-js/commit/416584369de1dad9b21ac3fe85df0b71cf5718b2","https://github.com/danang-id/simple-crypto-js","https://robertheaton.com/2013/07/29/padding-oracle-attack","https://snyk.io/vuln/SNYK-JS-SIMPLECRYPTOJS-544027"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-5v7r-jg9r-vq44","url":"https://osv.dev/vulnerability/GHSA-5v7r-jg9r-vq44"}],"summary":"Insecure Cryptography Algorithm in simple-crypto-js"}