{"action":"Upgrade terriajs-server to 2.7.4 or later.","affected":[{"fixed":"2.7.4","introduced":"0"}],"component":"terriajs-server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.7.4"],"ghsa_id":"GHSA-p72p-rjr2-r439","id":"tcs_01M5KG2V59YNCFQYASYR5Q474B","modified_at":"2020-08-31T18:35:03Z","published_at":"2019-05-29T20:24:02Z","references":["https://osv.dev/vulnerability/GHSA-p72p-rjr2-r439","https://github.com/TerriaJS/terriajs-server/commit/3cbc48475f50a53962f605491d0e60648a29bdf0","https://medium.com/terria/security-vulnerability-in-terriajs-server-82c8bf4da0a5","https://www.npmjs.com/advisories/768"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-p72p-rjr2-r439","url":"https://osv.dev/vulnerability/GHSA-p72p-rjr2-r439"}],"summary":"Server-Side Request Forgery in terriajs-server"}