{"action":"Upgrade opencc to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"opencc","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-7fqq-q52p-2jjg","id":"tcs_01M5KF5V3XQNHWD513F5KQXQ1K","modified_at":"2026-03-29T15:46:35.754685Z","published_at":"2026-03-29T15:27:41Z","references":["https://osv.dev/vulnerability/GHSA-7fqq-q52p-2jjg","https://github.com/BYVoid/OpenCC/security/advisories/GHSA-7fqq-q52p-2jjg","https://github.com/BYVoid/OpenCC/issues/997","https://github.com/BYVoid/OpenCC/pull/1005","https://github.com/BYVoid/OpenCC","https://github.com/BYVoid/OpenCC/releases/tag/ver.1.2.0"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-7fqq-q52p-2jjg","url":"https://osv.dev/vulnerability/GHSA-7fqq-q52p-2jjg"}],"summary":"OpenCC has an Out-of-bounds read when processing truncated UTF-8 input"}