{"action":"Upgrade npm to 8.11.0 or later.","affected":[{"fixed":"8.11.0","introduced":"7.9.0"}],"component":"npm","cve_ids":["CVE-2022-29244"],"ecosystem":"npm","epss":0.04004,"exploited":false,"fixed_versions":["8.11.0"],"ghsa_id":"GHSA-hj9c-8jmm-8c52","id":"tcs_01M5KFVBV31JHRYS8PKZE0K4F0","modified_at":"2023-11-08T04:09:11.980528Z","published_at":"2022-06-02T15:37:27Z","references":["https://osv.dev/vulnerability/GHSA-hj9c-8jmm-8c52","https://github.com/npm/cli/security/advisories/GHSA-hj9c-8jmm-8c52","https://nvd.nist.gov/vuln/detail/CVE-2022-29244","https://github.com/nodejs/node/pull/43210","https://github.com/nodejs/node/releases/tag/v16.15.1","https://github.com/nodejs/node/releases/tag/v17.9.1","https://github.com/nodejs/node/releases/tag/v18.3.0","https://github.com/npm/cli","https://github.com/npm/cli/releases/tag/v8.11.0","https://github.com/npm/cli/tree/latest/workspaces/libnpmpack","https://github.com/npm/cli/tree/latest/workspaces/libnpmpublish","https://github.com/npm/npm-packlist","https://security.netapp.com/advisory/ntap-20220722-0007"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hj9c-8jmm-8c52","url":"https://osv.dev/vulnerability/GHSA-hj9c-8jmm-8c52"}],"summary":"Packing does not respect root-level ignore files in workspaces"}