{"action":"Upgrade tiny-json-http to 7.0.0 or later.","affected":[{"fixed":"7.0.0","introduced":"1.0.1"}],"component":"tiny-json-http","cve_ids":["CVE-2018-1000096"],"ecosystem":"npm","epss":0.00673,"exploited":false,"fixed_versions":["7.0.0"],"ghsa_id":"GHSA-7h42-5vj2-cq39","id":"tcs_01M5KFA2Z7XA1MX0BFRXQ74KSC","modified_at":"2023-11-08T03:59:34.526312Z","published_at":"2018-03-13T20:42:00Z","references":["https://osv.dev/vulnerability/GHSA-7h42-5vj2-cq39","https://nvd.nist.gov/vuln/detail/CVE-2018-1000096","https://github.com/brianleroux/tiny-json-http/pull/15","https://github.com/brianleroux/tiny-json-http/commit/3c1e36d8bef3ef5fd8e4447f816d5ffe2bfc3190","https://github.com/advisories/GHSA-7h42-5vj2-cq39","https://github.com/brianleroux/tiny-json-http"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-7h42-5vj2-cq39","url":"https://osv.dev/vulnerability/GHSA-7h42-5vj2-cq39"}],"summary":"tiny-json-http missing SSL certificate validation"}