{"action":"Upgrade file-type to 16.5.4 or later.","affected":[{"fixed":"16.5.4","introduced":"13.0.0"},{"fixed":"17.1.3","introduced":"17.0.0"}],"component":"file-type","cve_ids":["CVE-2022-36313"],"ecosystem":"npm","epss":0.00406,"exploited":false,"fixed_versions":["16.5.4","17.1.3"],"ghsa_id":"GHSA-mhxj-85r3-2x55","id":"tcs_01M5KG0VEF6FCAQTE4YG10XR00","modified_at":"2023-11-08T04:10:02.456879Z","published_at":"2022-07-22T00:00:38Z","references":["https://osv.dev/vulnerability/GHSA-mhxj-85r3-2x55","https://nvd.nist.gov/vuln/detail/CVE-2022-36313","https://github.com/sindresorhus/file-type/commit/2c4d1200c99dffb7d515b9b9951ef43c22bf7e47","https://github.com/sindresorhus/file-type/commit/8f981c32e2750d2516457e305e502ee2ad715759#diff-c853b2249e99790d8725774cf63c90c5ab17112067df6e267f3701d7bf591d12","https://github.com/sindresorhus/file-type/commit/d86835680f4cccbee1a60628783c36700ec9e254","https://github.com/sindresorhus/file-type","https://github.com/sindresorhus/file-type/compare/v12.4.2...v13.0.0#diff-c853b2249e99790d8725774cf63c90c5ab17112067df6e267f3701d7bf591d12R611-R613","https://github.com/sindresorhus/file-type/releases/tag/v16.5.4","https://github.com/sindresorhus/file-type/releases/tag/v17.1.3","https://security.netapp.com/advisory/ntap-20220909-0005","https://security.snyk.io/vuln/SNYK-JS-FILETYPE-2958042","https://www.npmjs.com/package/file-type"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mhxj-85r3-2x55","url":"https://osv.dev/vulnerability/GHSA-mhxj-85r3-2x55"}],"summary":"file-type vulnerable to Infinite Loop via malformed MKV file"}