{"action":"Upgrade express-cart to 1.1.8 or later.","affected":[{"fixed":"1.1.8","introduced":"0"}],"component":"express-cart","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.1.8"],"ghsa_id":"GHSA-f5cv-xrv9-r8w7","id":"tcs_01M5KFMHKQEY0Z5RDXX7E133JK","modified_at":"2021-09-24T20:58:36Z","published_at":"2020-09-01T21:17:16Z","references":["https://osv.dev/vulnerability/GHSA-f5cv-xrv9-r8w7","https://hackerone.com/reports/397445","https://github.com/nodejs/security-wg","https://github.com/nodejs/security-wg/blob/master/vuln/npm/472.json","https://www.npmjs.com/advisories/724"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-f5cv-xrv9-r8w7","url":"https://osv.dev/vulnerability/GHSA-f5cv-xrv9-r8w7"}],"summary":"NoSQL injection in express-cart"}