{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"6.3.3"}],"component":"foundation-sites","cve_ids":["CVE-2020-26304"],"ecosystem":"npm","epss":0.00539,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p8pc-3f7w-jr5q","id":"tcs_01M5KG333YA8N563SX598A9TQ0","modified_at":"2024-11-13T23:24:36Z","published_at":"2024-10-26T21:30:46Z","references":["https://osv.dev/vulnerability/GHSA-p8pc-3f7w-jr5q","https://nvd.nist.gov/vuln/detail/CVE-2020-26304","https://github.com/foundation/foundation-sites/issues/12180","https://github.com/foundation/foundation-sites","https://securitylab.github.com/advisories/GHSL-2020-290-redos-foundation-sites"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p8pc-3f7w-jr5q","url":"https://osv.dev/vulnerability/GHSA-p8pc-3f7w-jr5q"}],"summary":"Foundation Regular Expression Denial of Service vulnerability"}