{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.5"}],"component":"hubl-server","cve_ids":["CVE-2017-16035"],"ecosystem":"npm","epss":0.0072,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h8mc-42c3-r72p","id":"tcs_01M5KFTJJZ28KTMR5R7XQCSE85","modified_at":"2023-11-08T03:59:00.802973Z","published_at":"2018-07-24T15:40:47Z","references":["https://osv.dev/vulnerability/GHSA-h8mc-42c3-r72p","https://nvd.nist.gov/vuln/detail/CVE-2017-16035","https://github.com/advisories/GHSA-h8mc-42c3-r72p","https://www.npmjs.com/advisories/334"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-h8mc-42c3-r72p","url":"https://osv.dev/vulnerability/GHSA-h8mc-42c3-r72p"}],"summary":"hubl-server downloads resources over HTTP"}