{"action":"Upgrade @absolunet/kafe to 3.2.10 or later.","affected":[{"fixed":"3.2.10","introduced":"0"}],"component":"@absolunet/kafe","cve_ids":["CVE-2020-7761"],"ecosystem":"npm","epss":0.01574,"exploited":false,"fixed_versions":["3.2.10"],"ghsa_id":"GHSA-hgpf-97c5-74fc","id":"tcs_01M5KFV3KRMX81PK1X6CMTWF3K","modified_at":"2026-09-10T03:49:14.683087069Z","published_at":"2021-05-10T19:08:29Z","references":["https://osv.dev/vulnerability/GHSA-hgpf-97c5-74fc","https://nvd.nist.gov/vuln/detail/CVE-2020-7761","https://github.com/absolunet/kafe/commit/c644c798bfcdc1b0bbb1f0ca59e2e2664ff3fdd0%23diff-f0f4b5b19ad46588ae9d7dc1889f681252b0698a4ead3a77b7c7d127ee657857","https://snyk.io/vuln/SNYK-JS-ABSOLUNETKAFE-1017403","https://www.npmjs.com/package/@absolunet/kafe"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-hgpf-97c5-74fc","url":"https://osv.dev/vulnerability/GHSA-hgpf-97c5-74fc"}],"summary":"Regular expression denial of service in @absolunet/kafe"}