{"action":"Upgrade baryton-saxophone to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"baryton-saxophone","cve_ids":["CVE-2016-10573"],"ecosystem":"npm","epss":0.02072,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-6pwf-whc8-hjf6","id":"tcs_01M5KF7MJR14PBD9RZP93RPG37","modified_at":"2023-11-08T03:58:13.430606Z","published_at":"2019-02-18T23:35:18Z","references":["https://osv.dev/vulnerability/GHSA-6pwf-whc8-hjf6","https://nvd.nist.gov/vuln/detail/CVE-2016-10573","https://github.com/advisories/GHSA-6pwf-whc8-hjf6","https://www.npmjs.com/advisories/240"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-6pwf-whc8-hjf6","url":"https://osv.dev/vulnerability/GHSA-6pwf-whc8-hjf6"}],"summary":"Downloads Resources over HTTP in baryton-saxophone"}