{"action":"Upgrade headless-browser-lite to 2015.4.18-a or later.","affected":[{"fixed":"2015.4.18-a","introduced":"0"}],"component":"headless-browser-lite","cve_ids":["CVE-2016-10625"],"ecosystem":"npm","epss":0.01656,"exploited":false,"fixed_versions":["2015.4.18-a"],"ghsa_id":"GHSA-g95j-p8f6-pwh4","id":"tcs_01M5KFR4QC1YAJ1AKK3FBY2WD3","modified_at":"2023-11-08T03:58:16.603262Z","published_at":"2019-02-18T23:56:58Z","references":["https://osv.dev/vulnerability/GHSA-g95j-p8f6-pwh4","https://nvd.nist.gov/vuln/detail/CVE-2016-10625","https://github.com/kaizhu256/node-phantomjs-lite/commit/96f766e5674e8462b5f5bbd4494390988f0a3916","https://github.com/kaizhu256/node-phantomjs-lite/commit/f6e2a9489446a1dabe175aa8c14a1c55ca824520","https://github.com/advisories/GHSA-g95j-p8f6-pwh4","https://www.npmjs.com/advisories/230"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g95j-p8f6-pwh4","url":"https://osv.dev/vulnerability/GHSA-g95j-p8f6-pwh4"}],"summary":"headless-browser-lite downloads Resources over HTTP"}