{"action":"Upgrade react-native to 0.62.3 or later.","affected":[{"fixed":"0.62.3","introduced":"0.59.0"},{"fixed":"0.64.1","introduced":"0.63.0"}],"component":"react-native","cve_ids":["CVE-2020-1920"],"ecosystem":"npm","epss":0.01363,"exploited":false,"fixed_versions":["0.62.3","0.64.1"],"ghsa_id":"GHSA-7f53-fmmv-mfjv","id":"tcs_01M5KF9RBJ76T3SQGHT2MWJ27M","modified_at":"2023-11-08T04:02:45.376849Z","published_at":"2021-07-20T17:33:28Z","references":["https://osv.dev/vulnerability/GHSA-7f53-fmmv-mfjv","https://nvd.nist.gov/vuln/detail/CVE-2020-1920","https://github.com/facebook/react-native/commit/ca09ae82715e33c9ac77b3fa55495cf84ba891c7","https://github.com/facebook/react-native/releases/tag/v0.62.3","https://github.com/facebook/react-native/releases/tag/v0.64.1","https://securitylab.github.com/advisories/GHSL-2020-293-redos-react-native","https://www.npmjs.com/package/react-native"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7f53-fmmv-mfjv","url":"https://osv.dev/vulnerability/GHSA-7f53-fmmv-mfjv"}],"summary":"Regular expression denial of service in react-native"}