{"action":"Upgrade kerberos to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"kerberos","cve_ids":["CVE-2020-13110"],"ecosystem":"npm","epss":0.00737,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-m2mx-rfpw-jghv","id":"tcs_01M5KFZCCBCJWZ71Y570XRSNYE","modified_at":"2023-11-08T04:02:12.446741Z","published_at":"2020-09-04T18:01:59Z","references":["https://osv.dev/vulnerability/GHSA-m2mx-rfpw-jghv","https://nvd.nist.gov/vuln/detail/CVE-2020-13110","https://github.com/mongodb-js/kerberos","https://medium.com/@kiddo_Ha3ker/dll-injection-attack-in-kerberos-npm-package-cb4b32031cd","https://www.linkedin.com/posts/op-innovate_dll-injection-attack-in-kerberos-npm-package-activity-6667043749547253760-kVlW","https://www.npmjs.com/advisories/1514","https://www.op-c.net/2020/05/15/dll-injection-attack-in-kerberos-npm-package"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-m2mx-rfpw-jghv","url":"https://osv.dev/vulnerability/GHSA-m2mx-rfpw-jghv"}],"summary":"DLL Injection in kerberos"}