{"action":"Upgrade is-my-json-valid to 2.12.4 or later.","affected":[{"fixed":"2.12.4","introduced":"0"}],"component":"is-my-json-valid","cve_ids":["CVE-2016-2537"],"ecosystem":"npm","epss":0.01849,"exploited":false,"fixed_versions":["2.12.4"],"ghsa_id":"GHSA-f522-ffg8-j8r6","id":"tcs_01M5KFMFPK8JHZ0RCMNKNF3RBF","modified_at":"2025-10-17T17:50:27Z","published_at":"2017-10-24T18:33:35Z","references":["https://osv.dev/vulnerability/GHSA-f522-ffg8-j8r6","https://nvd.nist.gov/vuln/detail/CVE-2016-2537","https://github.com/github/advisory-database/pull/4850","https://github.com/mafintosh/is-my-json-valid/pull/159","https://github.com/mafintosh/is-my-json-valid/commit/b3051b277f7caa08cd2edc6f74f50aeda65d2976","https://github.com/mafintosh/is-my-json-valid/commit/eca4beb21e61877d76fdf6bea771f72f39544d9b","https://hackerone.com/reports/317548","https://github.com/advisories/GHSA-f522-ffg8-j8r6","https://github.com/mafintosh/is-my-json-valid","https://www.npmjs.com/advisories/572","https://www.npmjs.com/advisories/76"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f522-ffg8-j8r6","url":"https://osv.dev/vulnerability/GHSA-f522-ffg8-j8r6"}],"summary":"Regular Expression Denial of Service in is-my-json-valid"}