{"action":"Upgrade kurwov to 3.2.5 or later.","affected":[{"fixed":"3.2.5","introduced":"3.1.0"}],"component":"kurwov","cve_ids":["CVE-2024-34075"],"ecosystem":"npm","epss":0.00299,"exploited":false,"fixed_versions":["3.2.5"],"ghsa_id":"GHSA-hfrv-h3q8-9jpr","id":"tcs_01M5KFTYS826G91F1VFA0TTN8Y","modified_at":"2026-09-10T03:50:00.430987236Z","published_at":"2024-05-03T20:30:38Z","references":["https://osv.dev/vulnerability/GHSA-hfrv-h3q8-9jpr","https://github.com/xiboon/kurwov/security/advisories/GHSA-hfrv-h3q8-9jpr","https://nvd.nist.gov/vuln/detail/CVE-2024-34075","https://github.com/xiboon/kurwov/commit/85d63e652594f121d6656177d7a3c0d823c976c9","https://github.com/xiboon/kurwov","https://github.com/xiboon/kurwov/blob/0d58dfa42135ab40e830e92622857282f980ca89/src/MarkovData.ts#L38-L44"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-hfrv-h3q8-9jpr","url":"https://osv.dev/vulnerability/GHSA-hfrv-h3q8-9jpr"}],"summary":"kurwov vulnerable to Denial of Service due to improper data sanitization"}