{"action":"Upgrade xmlhttprequest-ssl to 1.6.1 or later.","affected":[{"fixed":"1.6.1","introduced":"0"}],"component":"xmlhttprequest-ssl","cve_ids":["CVE-2021-31597"],"ecosystem":"npm","epss":0.02039,"exploited":false,"fixed_versions":["1.6.1"],"ghsa_id":"GHSA-72mh-269x-7mh5","id":"tcs_01M5KF8GR0SB3AMTDF8TD60P9G","modified_at":"2023-11-08T04:05:49.810123Z","published_at":"2021-05-24T19:52:55Z","references":["https://osv.dev/vulnerability/GHSA-72mh-269x-7mh5","https://nvd.nist.gov/vuln/detail/CVE-2021-31597","https://github.com/mjwwit/node-XMLHttpRequest/commit/bf53329b61ca6afc5d28f6b8d2dc2e3ca740a9b2","https://github.com/mjwwit/node-XMLHttpRequest/compare/v1.6.0...1.6.1","https://people.kingsds.network/wesgarland/xmlhttprequest-ssl-vuln.txt","https://security.netapp.com/advisory/ntap-20210618-0004"],"severity":{"label":"critical","score":9.4},"sources":[{"source":"osv","source_id":"GHSA-72mh-269x-7mh5","url":"https://osv.dev/vulnerability/GHSA-72mh-269x-7mh5"}],"summary":"Improper Certificate Validation in xmlhttprequest-ssl"}