{"action":"Upgrade shescape to 1.6.1 or later.","affected":[{"fixed":"1.6.1","introduced":"1.5.10"}],"component":"shescape","cve_ids":["CVE-2022-25918"],"ecosystem":"npm","epss":0.01629,"exploited":false,"fixed_versions":["1.6.1"],"ghsa_id":"GHSA-cr84-xvw4-qx3c","id":"tcs_01M5KFKGYYFVYRCBQHY5PMNPP9","modified_at":"2023-11-08T04:08:52.072325Z","published_at":"2022-10-25T22:27:32Z","references":["https://osv.dev/vulnerability/GHSA-cr84-xvw4-qx3c","https://github.com/ericcornelissen/shescape/security/advisories/GHSA-cr84-xvw4-qx3c","https://nvd.nist.gov/vuln/detail/CVE-2022-25918","https://github.com/ericcornelissen/shescape/commit/552e8eab56861720b1d4e5474fb65741643358f9","https://github.com/ericcornelissen/shescape","https://github.com/ericcornelissen/shescape/blob/main/src/unix.js%23L52","https://github.com/ericcornelissen/shescape/releases/tag/v1.6.1","https://security.snyk.io/vuln/SNYK-JS-SHESCAPE-3061108"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cr84-xvw4-qx3c","url":"https://osv.dev/vulnerability/GHSA-cr84-xvw4-qx3c"}],"summary":"Inefficient Regular Expression Complexity in shescape"}