{"action":"Upgrade jointjs to 3.3.0 or later.","affected":[{"fixed":"3.3.0","introduced":"0"}],"component":"jointjs","cve_ids":["CVE-2020-28479"],"ecosystem":"npm","epss":0.02072,"exploited":false,"fixed_versions":["3.3.0"],"ghsa_id":"GHSA-cq8r-fc3q-6hg2","id":"tcs_01M5KFKAEKEPE97X4083GHKVEK","modified_at":"2024-11-14T01:42:21.552570Z","published_at":"2021-04-13T15:29:40Z","references":["https://osv.dev/vulnerability/GHSA-cq8r-fc3q-6hg2","https://nvd.nist.gov/vuln/detail/CVE-2020-28479","https://github.com/clientIO/joint/commit/ec7ab01b512a3c06a9944a25d50f255bf07c3499","https://github.com/clientIO/joint/releases/tag/v3.3.0","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1062040","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1062039","https://snyk.io/vuln/SNYK-JS-JOINTJS-1062038"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cq8r-fc3q-6hg2","url":"https://osv.dev/vulnerability/GHSA-cq8r-fc3q-6hg2"}],"summary":"Denial of Service (DoS) via the unsetByPath function in jsjoints"}