{"action":"Upgrade crumb to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"crumb","cve_ids":["CVE-2014-7193"],"ecosystem":"npm","epss":0.01367,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-84fq-6626-w5fg","id":"tcs_01M5KFBQ6EPB77JWXQM50RKDMB","modified_at":"2023-11-08T03:57:44.616100Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-84fq-6626-w5fg","https://nvd.nist.gov/vuln/detail/CVE-2014-7193","https://github.com/hapijs/crumb/commit/5e6d4f5c81677fe9e362837ffd4a02394303db3c","https://github.com/spumko/crumb/commit/5e6d4f5c81677fe9e362837ffd4a02394303db3c","https://github.com/advisories/GHSA-84fq-6626-w5fg","https://www.npmjs.com/advisories/4"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-84fq-6626-w5fg","url":"https://osv.dev/vulnerability/GHSA-84fq-6626-w5fg"}],"summary":"CORS Token Disclosure in crumb"}