{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.7.11"}],"component":"node-static","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8r4g-cg4m-x23c","id":"tcs_01M5KFDVD9WFKCTA71ENJ9N62Q","modified_at":"2025-10-03T18:27:42Z","published_at":"2021-09-22T18:22:02Z","references":["https://osv.dev/vulnerability/GHSA-8r4g-cg4m-x23c","https://nvd.nist.gov/vuln/detail/CVE-2025-11149","https://github.com/cloudhead/node-static/pull/213","https://github.com/github/advisory-database/pull/6248","https://github.com/cloudhead/node-static","https://github.com/cloudhead/node-static/blob/643a528ec7bbd05a59c4030655d94810570afb3f/CHANGES.md#-unreleased","https://security.snyk.io/vuln/SNYK-JS-NODESTATIC-1297183"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8r4g-cg4m-x23c","url":"https://osv.dev/vulnerability/GHSA-8r4g-cg4m-x23c"}],"summary":"Denial of Service in node-static"}