{"action":"Upgrade @uppy/companion to 1.13.2 or later.","affected":[{"fixed":"1.13.2","introduced":"0"},{"fixed":"2.0.0-alpha.5","introduced":"2.0.0-alpha.0"}],"component":"@uppy/companion","cve_ids":["CVE-2020-8205"],"ecosystem":"npm","epss":0.0119,"exploited":false,"fixed_versions":["1.13.2","2.0.0-alpha.5"],"ghsa_id":"GHSA-9m4x-8w29-r78g","id":"tcs_01M5KFG5WE58J05D49VV6GKFWY","modified_at":"2023-11-08T04:04:15.660374Z","published_at":"2020-08-13T18:54:19Z","references":["https://osv.dev/vulnerability/GHSA-9m4x-8w29-r78g","https://nvd.nist.gov/vuln/detail/CVE-2020-8205","https://github.com/transloadit/uppy/pull/2322/commits/dbf2f4f30aeaf3bcc5971bb867bb0b5984084828","https://hackerone.com/reports/891270","https://github.com/transloadit/uppy/blob/master/CHANGELOG.md#1161"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9m4x-8w29-r78g","url":"https://osv.dev/vulnerability/GHSA-9m4x-8w29-r78g"}],"summary":"Server-Side Request Forgery in @uppy/companion"}