{"action":"Upgrade request to 2.68.0 or later.","affected":[{"fixed":"2.68.0","introduced":"2.49.0"},{"fixed":"2.68.0","introduced":"2.2.6"}],"component":"request","cve_ids":["CVE-2017-16026"],"ecosystem":"npm","epss":0.02563,"exploited":false,"fixed_versions":["2.68.0"],"ghsa_id":"GHSA-7xfp-9c55-5vqj","id":"tcs_01M5KFB71PR3J4M978P8WETKD8","modified_at":"2023-11-08T03:59:00.437371Z","published_at":"2018-11-09T17:44:01Z","references":["https://osv.dev/vulnerability/GHSA-7xfp-9c55-5vqj","https://nvd.nist.gov/vuln/detail/CVE-2017-16026","https://github.com/request/request/issues/1904","https://github.com/request/request/pull/2018","https://github.com/request/request/pull/2022","https://github.com/request/request/commit/29d81814bc16bc79cb112b4face8be6fc00061dd","https://github.com/request/request"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-7xfp-9c55-5vqj","url":"https://osv.dev/vulnerability/GHSA-7xfp-9c55-5vqj"}],"summary":"Remote Memory Exposure in request"}