{"action":"Upgrade aws-lambda-multipart-parser to 0.1.2 or later.","affected":[{"fixed":"0.1.2","introduced":"0"}],"component":"aws-lambda-multipart-parser","cve_ids":["CVE-2018-7560"],"ecosystem":"npm","epss":0.01356,"exploited":false,"fixed_versions":["0.1.2"],"ghsa_id":"GHSA-6jqp-j69q-pm62","id":"tcs_01M5KF7C5C4KHMFREQARRQ5Q1P","modified_at":"2023-11-08T04:00:22.998857Z","published_at":"2018-03-05T19:16:56Z","references":["https://osv.dev/vulnerability/GHSA-6jqp-j69q-pm62","https://nvd.nist.gov/vuln/detail/CVE-2018-7560","https://github.com/myshenin/aws-lambda-multipart-parser/commit/56ccb03af4dddebc2b2defb348b6558783d5757e","https://github.com/advisories/GHSA-6jqp-j69q-pm62","https://github.com/myshenin/aws-lambda-multipart-parser"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6jqp-j69q-pm62","url":"https://osv.dev/vulnerability/GHSA-6jqp-j69q-pm62"}],"summary":"AWS Lambda parser is vulnerable to Regular Expression Denial of Service"}