{"action":"Upgrade uglify-js to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"uglify-js","cve_ids":["CVE-2015-8858"],"ecosystem":"npm","epss":0.02358,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-c9f4-xj24-8jqx","id":"tcs_01M5KFJ8QFHPNQNR1TEE7RBMWX","modified_at":"2023-11-08T03:58:03.623951Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-c9f4-xj24-8jqx","https://nvd.nist.gov/vuln/detail/CVE-2015-8858","https://github.com/advisories/GHSA-c9f4-xj24-8jqx","https://www.npmjs.com/advisories/48","http://www.openwall.com/lists/oss-security/2016/04/20/11","http://www.securityfocus.com/bid/96409"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c9f4-xj24-8jqx","url":"https://osv.dev/vulnerability/GHSA-c9f4-xj24-8jqx"}],"summary":"Regular Expression Denial of Service in uglify-js"}