{"action":"Upgrade express-restify-mongoose to 2.5.0 or later.","affected":[{"fixed":"3.1.0","introduced":"3.0.0"},{"fixed":"2.5.0","introduced":"0"}],"component":"express-restify-mongoose","cve_ids":["CVE-2016-10533"],"ecosystem":"npm","epss":0.014,"exploited":false,"fixed_versions":["3.1.0","2.5.0"],"ghsa_id":"GHSA-cgjx-mwpx-47jv","id":"tcs_01M5KFJQPW1N2AABM4NWB51H37","modified_at":"2023-11-08T03:58:11.025729Z","published_at":"2018-10-23T17:14:57Z","references":["https://osv.dev/vulnerability/GHSA-cgjx-mwpx-47jv","https://nvd.nist.gov/vuln/detail/CVE-2016-10533","https://github.com/florianholzapfel/express-restify-mongoose/issues/252","https://github.com/florianholzapfel/express-restify-mongoose/pull/253","https://github.com/florianholzapfel/express-restify-mongoose/commit/23ccb247d0074bfaca6737cdff52d89c6d6e4a7c","https://github.com/florianholzapfel/express-restify-mongoose/commit/746defcd808e2ed1e8931dc36702b25b7db0e94b","https://github.com/advisories/GHSA-cgjx-mwpx-47jv","https://www.npmjs.com/advisories/92"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cgjx-mwpx-47jv","url":"https://osv.dev/vulnerability/GHSA-cgjx-mwpx-47jv"}],"summary":"Private Data Disclosure in express-restify-mongoose"}