{"action":"Upgrade generate-password to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"0"}],"component":"generate-password","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-6qqf-vvcr-7qrv","id":"tcs_01M5KF7RSGNZBSP4MNM9G9EABG","modified_at":"2020-08-31T18:34:48Z","published_at":"2019-05-23T09:27:22Z","references":["https://osv.dev/vulnerability/GHSA-6qqf-vvcr-7qrv","https://github.com/brendanashworth/generate-password/pull/26","https://www.npmjs.com/advisories/762"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-6qqf-vvcr-7qrv","url":"https://osv.dev/vulnerability/GHSA-6qqf-vvcr-7qrv"}],"summary":"Cryptographically Weak PRNG in generate-password"}