{"action":"Upgrade harp to 0.40.3 or later.","affected":[{"fixed":"0.40.3","introduced":"0"}],"component":"harp","cve_ids":["CVE-2019-5438"],"ecosystem":"npm","epss":0.01485,"exploited":false,"fixed_versions":["0.40.3"],"ghsa_id":"GHSA-6fmm-47qc-p4m4","id":"tcs_01M5KF6TXMN2MFE6X9FB2WTS2W","modified_at":"2023-11-08T04:01:36.228118Z","published_at":"2019-06-13T16:12:26Z","references":["https://osv.dev/vulnerability/GHSA-6fmm-47qc-p4m4","https://nvd.nist.gov/vuln/detail/CVE-2019-5438","https://hackerone.com/reports/530289","https://www.npmjs.com/advisories/816"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-6fmm-47qc-p4m4","url":"https://osv.dev/vulnerability/GHSA-6fmm-47qc-p4m4"}],"summary":"Unauthorized File Access in harp"}