{"action":"Upgrade ibm_db to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"}],"component":"ibm_db","cve_ids":["CVE-2016-10577"],"ecosystem":"npm","epss":0.01522,"exploited":false,"fixed_versions":["1.0.2"],"ghsa_id":"GHSA-c4qp-h3m6-785f","id":"tcs_01M5KFHRMKCPVMSEPAESZ8X5KK","modified_at":"2023-11-08T03:58:13.673934Z","published_at":"2019-02-18T23:51:59Z","references":["https://osv.dev/vulnerability/GHSA-c4qp-h3m6-785f","https://nvd.nist.gov/vuln/detail/CVE-2016-10577","https://github.com/ibmdb/node-ibm_db/commit/d7e2d4b4cbeb6f067df8bba7d0b2ac5d40fcfc19#diff-315091eb1586966006e05ebc21cd2a94","https://github.com/advisories/GHSA-c4qp-h3m6-785f","https://www.npmjs.com/advisories/163"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-c4qp-h3m6-785f","url":"https://osv.dev/vulnerability/GHSA-c4qp-h3m6-785f"}],"summary":"ibm_db downloads Resources over HTTP"}