{"action":"Upgrade @tomphttp/bare-server-node to 2.0.2 or later.","affected":[{"fixed":"2.0.2","introduced":"0"}],"component":"@tomphttp/bare-server-node","cve_ids":["CVE-2024-27922"],"ecosystem":"npm","epss":0.00823,"exploited":false,"fixed_versions":["2.0.2"],"ghsa_id":"GHSA-86fc-f9gr-v533","id":"tcs_01M5KFBZAJYB17XBQ7FS6J6QPJ","modified_at":"2024-03-21T18:25:29Z","published_at":"2024-03-05T16:24:31Z","references":["https://osv.dev/vulnerability/GHSA-86fc-f9gr-v533","https://github.com/tomphttp/bare-server-node/security/advisories/GHSA-86fc-f9gr-v533","https://nvd.nist.gov/vuln/detail/CVE-2024-27922","https://github.com/tomphttp/bare-server-node"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-86fc-f9gr-v533","url":"https://osv.dev/vulnerability/GHSA-86fc-f9gr-v533"}],"summary":"HTTP Handling Vulnerability in the Bare server"}