{"action":"Upgrade tough-cookie to 2.3.3 or later.","affected":[{"fixed":"2.3.3","introduced":"0"}],"component":"tough-cookie","cve_ids":["CVE-2017-15010"],"ecosystem":"npm","epss":0.03283,"exploited":false,"fixed_versions":["2.3.3"],"ghsa_id":"GHSA-g7q5-pjjr-gqvp","id":"tcs_01M5KFQWZFXT2E54GZQVME2TX2","modified_at":"2023-11-08T03:58:56.101045Z","published_at":"2018-07-24T20:14:39Z","references":["https://osv.dev/vulnerability/GHSA-g7q5-pjjr-gqvp","https://nvd.nist.gov/vuln/detail/CVE-2017-15010","https://github.com/salesforce/tough-cookie/issues/92","https://github.com/salesforce/tough-cookie/commit/f1ed420a6a92ea7a5418df6e39e676556bc0c71d","https://access.redhat.com/errata/RHSA-2017:2912","https://access.redhat.com/errata/RHSA-2017:2913","https://access.redhat.com/errata/RHSA-2018:1263","https://access.redhat.com/errata/RHSA-2018:1264","https://github.com/advisories/GHSA-g7q5-pjjr-gqvp","https://github.com/salesforce/tough-cookie","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6VEBDTGNHVM677SLZDEHMWOP3ISMZSFT","https://snyk.io/vuln/npm:tough-cookie:20170905","https://www.npmjs.com/advisories/525","http://www.securityfocus.com/bid/101185"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-g7q5-pjjr-gqvp","url":"https://osv.dev/vulnerability/GHSA-g7q5-pjjr-gqvp"}],"summary":"Regular Expression Denial of Service in tough-cookie"}