{"action":"Upgrade @uppy/companion to 1.9.3 or later.","affected":[{"fixed":"1.9.3","introduced":"0"}],"component":"@uppy/companion","cve_ids":["CVE-2020-8135"],"ecosystem":"npm","epss":0.01328,"exploited":false,"fixed_versions":["1.9.3"],"ghsa_id":"GHSA-mm7r-265w-jv6f","id":"tcs_01M5KG11WSA879YA27RKC5ARKV","modified_at":"2023-11-08T04:04:14.077505Z","published_at":"2020-09-03T15:51:19Z","references":["https://osv.dev/vulnerability/GHSA-mm7r-265w-jv6f","https://nvd.nist.gov/vuln/detail/CVE-2020-8135","https://hackerone.com/reports/786956","https://www.npmjs.com/advisories/1501"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-mm7r-265w-jv6f","url":"https://osv.dev/vulnerability/GHSA-mm7r-265w-jv6f"}],"summary":"Server-Side Request Forgery in @uppy/companion"}