{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"14.0.3"}],"component":"discordi.js","cve_ids":["CVE-2017-16207"],"ecosystem":"npm","epss":0.00738,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fv9m-f7w4-889c","id":"tcs_01M5KFP9WHR3G2BNNRV3JEGG2F","modified_at":"2023-11-08T03:59:11.323049Z","published_at":"2018-08-06T21:43:03Z","references":["https://osv.dev/vulnerability/GHSA-fv9m-f7w4-889c","https://nvd.nist.gov/vuln/detail/CVE-2017-16207","https://github.com/advisories/GHSA-fv9m-f7w4-889c","https://www.npmjs.com/advisories/545"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-fv9m-f7w4-889c","url":"https://osv.dev/vulnerability/GHSA-fv9m-f7w4-889c"}],"summary":"discordi.js is malware"}