{"action":"Upgrade fast-xml-parser to 4.2.5 or later.","affected":[{"fixed":"4.2.5","introduced":"4.2.4"}],"component":"fast-xml-parser","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.2.5"],"ghsa_id":"GHSA-gpv5-7x3g-ghjv","id":"tcs_01M5KFS7JA9EEZPAVJH6K1QRXM","modified_at":"2023-06-15T19:05:13Z","published_at":"2023-06-15T19:05:13Z","references":["https://osv.dev/vulnerability/GHSA-gpv5-7x3g-ghjv","https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-6w63-h3fj-q4vw","https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-gpv5-7x3g-ghjv","https://github.com/NaturalIntelligence/fast-xml-parser/commit/9a880b887916855c3a510869fd1ee268d7fe58b1","https://github.com/NaturalIntelligence/fast-xml-parser"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-gpv5-7x3g-ghjv","url":"https://osv.dev/vulnerability/GHSA-gpv5-7x3g-ghjv"}],"summary":"fast-xml-parser regex vulnerability patch could be improved from a safety perspective"}