{"action":"Upgrade uri-template-lite to 22.9.0 or later.","affected":[{"fixed":"22.9.0","introduced":"0"}],"component":"uri-template-lite","cve_ids":["CVE-2021-43309"],"ecosystem":"npm","epss":0.00993,"exploited":false,"fixed_versions":["22.9.0"],"ghsa_id":"GHSA-chw2-6c7r-37p7","id":"tcs_01M5KFJXV7GRSQVWTHTHEAJWAA","modified_at":"2023-11-08T04:07:09.728481Z","published_at":"2022-08-25T00:00:27Z","references":["https://osv.dev/vulnerability/GHSA-chw2-6c7r-37p7","https://nvd.nist.gov/vuln/detail/CVE-2021-43309","https://github.com/litejs/uri-template-lite/commit/cbeec2b2a275d819fb534137a155df14729706f8","https://github.com/litejs/uri-template-lite","https://github.com/litejs/uri-template-lite/commits/v22.9.0","https://research.jfrog.com/vulnerabilities/uri-template-lite-redos-xray-211351"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-chw2-6c7r-37p7","url":"https://osv.dev/vulnerability/GHSA-chw2-6c7r-37p7"}],"summary":"uri-template-lite Regular Expression Denial of Service"}