{"action":"Upgrade base64-url to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"base64-url","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-j4mr-9xw3-c9jx","id":"tcs_01M5KFWXSNJNS9MK883GPKGJR8","modified_at":"2020-08-31T18:31:43Z","published_at":"2019-05-31T23:47:01Z","references":["https://osv.dev/vulnerability/GHSA-j4mr-9xw3-c9jx","https://hackerone.com/reports/321692","https://www.npmjs.com/advisories/660"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-j4mr-9xw3-c9jx","url":"https://osv.dev/vulnerability/GHSA-j4mr-9xw3-c9jx"}],"summary":"Out-of-bounds Read in base64-url"}