{"action":"Upgrade helmet-csp to 2.9.1 or later.","affected":[{"fixed":"2.9.1","introduced":"1.2.2"}],"component":"helmet-csp","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.9.1"],"ghsa_id":"GHSA-c3m8-x3cg-qm2c","id":"tcs_01M5KFHKV4KV0NMW9EX16605F1","modified_at":"2021-09-29T18:45:07Z","published_at":"2020-09-03T20:39:53Z","references":["https://osv.dev/vulnerability/GHSA-c3m8-x3cg-qm2c","https://github.com/helmetjs/csp/commit/67a69baafa8198a154f0505a0cf0875f76f6186a","https://github.com/helmetjs/csp","https://snyk.io/vuln/SNYK-JS-HELMETCSP-469436","https://www.npmjs.com/advisories/1176"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-c3m8-x3cg-qm2c","url":"https://osv.dev/vulnerability/GHSA-c3m8-x3cg-qm2c"}],"summary":"Configuration Override in helmet-csp"}