{"action":"Upgrade is-svg to 4.2.2 or later.","affected":[{"fixed":"4.2.2","introduced":"2.1.0"}],"component":"is-svg","cve_ids":["CVE-2021-28092"],"ecosystem":"npm","epss":0.02027,"exploited":false,"fixed_versions":["4.2.2"],"ghsa_id":"GHSA-7r28-3m3f-r2pr","id":"tcs_01M5KFAR4TEMYZWA8KVWR9SRA5","modified_at":"2023-11-08T04:05:28.214783Z","published_at":"2021-03-19T21:25:50Z","references":["https://osv.dev/vulnerability/GHSA-7r28-3m3f-r2pr","https://nvd.nist.gov/vuln/detail/CVE-2021-28092","https://github.com/sindresorhus/is-svg/commit/01f8a087fab8a69c3ac9085fbb16035907ab6a5b","https://github.com/sindresorhus/is-svg/releases","https://github.com/sindresorhus/is-svg/releases/tag/v4.2.2","https://security.netapp.com/advisory/ntap-20210513-0008","https://www.npmjs.com/package/is-svg"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7r28-3m3f-r2pr","url":"https://osv.dev/vulnerability/GHSA-7r28-3m3f-r2pr"}],"summary":"Regular Expression Denial of Service (ReDoS)"}