{"action":"Upgrade stringstream to 0.0.6 or later.","affected":[{"fixed":"0.0.6","introduced":"0"}],"component":"stringstream","cve_ids":["CVE-2018-21270"],"ecosystem":"npm","epss":0.03682,"exploited":false,"fixed_versions":["0.0.6"],"ghsa_id":"GHSA-mf6x-7mm4-x2g7","id":"tcs_01M5KG0HBYPY26C0E4BT8TPS65","modified_at":"2023-11-08T04:00:14.605779Z","published_at":"2019-06-20T18:22:32Z","references":["https://osv.dev/vulnerability/GHSA-mf6x-7mm4-x2g7","https://hackerone.com/reports/321670","https://github.com/mhart/StringStream/blob/v0.0.5/stringstream.js#L32","https://www.npmjs.com/advisories/664"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-mf6x-7mm4-x2g7","url":"https://osv.dev/vulnerability/GHSA-mf6x-7mm4-x2g7"}],"summary":"Out-of-bounds Read in stringstream"}