{"action":"Upgrade acorn to 5.7.4 or later.","affected":[{"fixed":"5.7.4","introduced":"5.5.0"},{"fixed":"6.4.1","introduced":"6.0.0"},{"fixed":"7.1.1","introduced":"7.0.0"}],"component":"acorn","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["5.7.4","6.4.1","7.1.1"],"ghsa_id":"GHSA-6chw-6frg-f759","id":"tcs_01M5KF6PR5QBQQVCHBGN75MTSS","modified_at":"2021-08-23T15:10:32Z","published_at":"2020-04-03T21:48:38Z","references":["https://osv.dev/vulnerability/GHSA-6chw-6frg-f759","https://github.com/acornjs/acorn/issues/929","https://github.com/acornjs/acorn/commit/793c0e569ed1158672e3a40aeed1d8518832b802","https://snyk.io/vuln/SNYK-JS-ACORN-559469","https://www.npmjs.com/advisories/1488"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6chw-6frg-f759","url":"https://osv.dev/vulnerability/GHSA-6chw-6frg-f759"}],"summary":"Regular Expression Denial of Service in Acorn"}