{"action":"Upgrade jsrsasign to 8.0.13 or later.","affected":[{"fixed":"8.0.13","introduced":"4.0.0"}],"component":"jsrsasign","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["8.0.13"],"ghsa_id":"GHSA-g753-jx37-7xwh","id":"tcs_01M5KFQF6GT5DVF7F8NNP4DWR1","modified_at":"2021-09-22T18:43:42Z","published_at":"2020-06-30T16:05:08Z","references":["https://osv.dev/vulnerability/GHSA-g753-jx37-7xwh","https://github.com/kjur/jsrsasign/security/advisories/GHSA-g753-jx37-7xwh","https://github.com/kjur/jsrsasign/issues/411","https://github.com/kjur/jsrsasign/commit/9dcb89c57408a3d4b5b66aa9138426bd92819e73","https://github.com/kjur/jsrsasign","https://github.com/kjur/jsrsasign/releases/tag/8.0.13","https://minerva.crocs.fi.muni.cz","https://snyk.io/vuln/SNYK-JS-JSRSASIGN-561755","https://www.npmjs.com/advisories/1505"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-g753-jx37-7xwh","url":"https://osv.dev/vulnerability/GHSA-g753-jx37-7xwh"}],"summary":"ECDSA signature vulnerability of Minerva timing attack in jsrsasign"}