{"action":"Upgrade urijs to 1.19.6 or later.","affected":[{"fixed":"1.19.6","introduced":"0"}],"component":"urijs","cve_ids":["CVE-2021-27516"],"ecosystem":"npm","epss":0.02483,"exploited":false,"fixed_versions":["1.19.6"],"ghsa_id":"GHSA-p6j9-7xhc-rhwp","id":"tcs_01M5KG2QNQ0K4NPNN5TNSVKK56","modified_at":"2023-11-08T04:05:24.794143Z","published_at":"2021-03-01T20:03:53Z","references":["https://osv.dev/vulnerability/GHSA-p6j9-7xhc-rhwp","https://github.com/medialize/URI.js/security/advisories/GHSA-p6j9-7xhc-rhwp","https://nvd.nist.gov/vuln/detail/CVE-2021-27516","https://github.com/medialize/URI.js/commit/a1ad8bcbc39a4d136d7e252e76e957f3ece70839","https://advisory.checkmarx.net/advisory/CX-2021-4305","https://github.com/medialize/URI.js","https://github.com/medialize/URI.js/releases/tag/v1.19.6"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p6j9-7xhc-rhwp","url":"https://osv.dev/vulnerability/GHSA-p6j9-7xhc-rhwp"}],"summary":"URIjs Hostname spoofing via backslashes in URL"}