{"action":"Upgrade @sideway/formula to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"@sideway/formula","cve_ids":["CVE-2023-25166"],"ecosystem":"npm","epss":0.00611,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-c2jc-4fpr-4vhg","id":"tcs_01M5KFHFXWPFVQ7W4NP77GFM30","modified_at":"2023-11-08T04:11:50.947189Z","published_at":"2023-02-08T22:38:10Z","references":["https://osv.dev/vulnerability/GHSA-c2jc-4fpr-4vhg","https://github.com/hapijs/formula/security/advisories/GHSA-c2jc-4fpr-4vhg","https://nvd.nist.gov/vuln/detail/CVE-2023-25166","https://github.com/hapijs/formula/commit/9fbc20a02d75ae809c37a610a57802cd1b41b3fe","https://github.com/hapijs/formula"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-c2jc-4fpr-4vhg","url":"https://osv.dev/vulnerability/GHSA-c2jc-4fpr-4vhg"}],"summary":"@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability"}