{"action":"Upgrade sockjs to 0.3.20 or later.","affected":[{"fixed":"0.3.20","introduced":"0"}],"component":"sockjs","cve_ids":["CVE-2020-7693"],"ecosystem":"npm","epss":0.04978,"exploited":false,"fixed_versions":["0.3.20"],"ghsa_id":"GHSA-c9g6-9335-x697","id":"tcs_01M5KFJ8XRWKAH5FBDF4V009PC","modified_at":"2024-09-03T02:27:05.113268Z","published_at":"2021-04-13T15:27:51Z","references":["https://osv.dev/vulnerability/GHSA-c9g6-9335-x697","https://nvd.nist.gov/vuln/detail/CVE-2020-7693","https://github.com/sockjs/sockjs-node/issues/252","https://github.com/sockjs/sockjs-node/pull/265","https://github.com/sockjs/sockjs-node/commit/dd7e642cd69ee74385825816d30642c43e051d16","https://github.com/andsnw/sockjs-dos-py","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-575448","https://snyk.io/vuln/SNYK-JS-SOCKJS-575261","https://www.npmjs.com/package/sockjs"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-c9g6-9335-x697","url":"https://osv.dev/vulnerability/GHSA-c9g6-9335-x697"}],"summary":"Improper Input Validation in SocksJS-Node"}