{"action":"Upgrade node-forge to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"node-forge","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-gf8q-jrpm-jvxq","id":"tcs_01M5KFRFNNA635RPT9TXXW3SMC","modified_at":"2022-01-07T22:20:43Z","published_at":"2022-01-08T00:22:02Z","references":["https://osv.dev/vulnerability/GHSA-gf8q-jrpm-jvxq","https://github.com/digitalbazaar/forge/security/advisories/GHSA-gf8q-jrpm-jvxq","https://nvd.nist.gov/vuln/detail/CVE-2022-0122","https://github.com/digitalbazaar/forge","https://www.huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4ae"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-gf8q-jrpm-jvxq","url":"https://osv.dev/vulnerability/GHSA-gf8q-jrpm-jvxq"}],"summary":"URL parsing in node-forge could lead to undesired behavior."}