{"action":"Upgrade @firebase/util to 0.3.4 or later.","affected":[{"fixed":"0.3.4","introduced":"0"}],"component":"@firebase/util","cve_ids":["CVE-2020-7765"],"ecosystem":"npm","epss":0.00569,"exploited":false,"fixed_versions":["0.3.4"],"ghsa_id":"GHSA-fpm5-vv97-jfwg","id":"tcs_01M5KFNY0VTEBE6FSE451VKMFJ","modified_at":"2026-09-10T03:49:26.779346740Z","published_at":"2021-05-18T01:57:24Z","references":["https://osv.dev/vulnerability/GHSA-fpm5-vv97-jfwg","https://nvd.nist.gov/vuln/detail/CVE-2020-7765","https://github.com/firebase/firebase-js-sdk/pull/4001","https://github.com/firebase/firebase-js-sdk/commit/9cf727fcc3d049551b16ae0698ac33dc2fe45ada","https://snyk.io/vuln/SNYK-JS-FIREBASEUTIL-1038324"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-fpm5-vv97-jfwg","url":"https://osv.dev/vulnerability/GHSA-fpm5-vv97-jfwg"}],"summary":"Uncontrolled Resource Consumption in firebase"}