{"action":"Upgrade ipfs-bitswap to 0.24.1 or later.","affected":[{"fixed":"0.24.1","introduced":"0"}],"component":"ipfs-bitswap","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.24.1"],"ghsa_id":"GHSA-6fcr-9h9g-23fq","id":"tcs_01M5KF6T4TX10Z6X1MKP3HM8G9","modified_at":"2023-12-07T22:08:14Z","published_at":"2020-09-02T21:50:51Z","references":["https://osv.dev/vulnerability/GHSA-6fcr-9h9g-23fq","https://github.com/ipfs/js-ipfs-bitswap/pull/194","https://github.com/ipfs/js-ipfs-bitswap","https://snyk.io/vuln/SNYK-JS-IPFSBITSWAP-174847","https://www.npmjs.com/advisories/916"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-6fcr-9h9g-23fq","url":"https://osv.dev/vulnerability/GHSA-6fcr-9h9g-23fq"}],"summary":"Denial of Service in ipfs-bitswap"}