{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.0"}],"component":"morgan-json","cve_ids":["CVE-2022-25921"],"ecosystem":"npm","epss":0.01427,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fwv4-6mxc-x5h3","id":"tcs_01M5KFPGE8D1AVK95Q3GN99AJ9","modified_at":"2023-11-08T04:08:52.196103Z","published_at":"2022-08-29T20:06:55Z","references":["https://osv.dev/vulnerability/GHSA-fwv4-6mxc-x5h3","https://nvd.nist.gov/vuln/detail/CVE-2022-25921","https://github.com/indexzero/morgan-json","https://github.com/indexzero/morgan-json/blob/3a76010215a4256d41687d082cd66c4f00ea5717/index.js%23L46","https://security.snyk.io/vuln/SNYK-JS-MORGANJSON-2976193"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fwv4-6mxc-x5h3","url":"https://osv.dev/vulnerability/GHSA-fwv4-6mxc-x5h3"}],"summary":"morgan-json vulnerable to Arbitrary Code Execution"}