{"action":"Upgrade negotiator to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"negotiator","cve_ids":["CVE-2016-10539"],"ecosystem":"npm","epss":0.01389,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-7mc5-chhp-fmc3","id":"tcs_01M5KFACVTENC45TX0JNGWQ3KW","modified_at":"2023-11-08T03:58:11.394437Z","published_at":"2018-10-09T00:30:30Z","references":["https://osv.dev/vulnerability/GHSA-7mc5-chhp-fmc3","https://nvd.nist.gov/vuln/detail/CVE-2016-10539","https://github.com/advisories/GHSA-7mc5-chhp-fmc3","https://www.npmjs.com/advisories/106"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-7mc5-chhp-fmc3","url":"https://osv.dev/vulnerability/GHSA-7mc5-chhp-fmc3"}],"summary":"Regular Expression Denial of Service in negotiator"}