{"action":"Upgrade yar to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"yar","cve_ids":["CVE-2014-4179"],"ecosystem":"npm","exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-gg6m-fhqv-hg56","id":"tcs_01M5KFRM3VNA2MW6J7FF0D6838","modified_at":"2023-11-08T03:57:41.602298Z","published_at":"2020-09-01T15:15:36Z","references":["https://osv.dev/vulnerability/GHSA-gg6m-fhqv-hg56","https://nvd.nist.gov/vuln/detail/CVE-2014-4179","https://github.com/spumko/yar/issues/34","https://github.com/spumko/yar","https://www.npmjs.com/advisories/44"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gg6m-fhqv-hg56","url":"https://osv.dev/vulnerability/GHSA-gg6m-fhqv-hg56"}],"summary":"Denial of Service in yar"}