{"action":"Upgrade string-kit to 0.12.8 or later.","affected":[{"fixed":"0.12.8","introduced":"0"}],"component":"string-kit","cve_ids":["CVE-2021-4299"],"ecosystem":"npm","epss":0.01014,"exploited":false,"fixed_versions":["0.12.8"],"ghsa_id":"GHSA-pfrm-4rjw-g9q5","id":"tcs_01M5KG3GTRKAMDGXQR6SKJXR6Z","modified_at":"2023-11-08T04:07:08.176632Z","published_at":"2023-01-02T09:31:57Z","references":["https://osv.dev/vulnerability/GHSA-pfrm-4rjw-g9q5","https://nvd.nist.gov/vuln/detail/CVE-2021-4299","https://github.com/cronvel/string-kit/commit/9cac4c298ee92c1695b0695951f1488884a7ca73","https://github.com/cronvel/string-kit","https://github.com/cronvel/string-kit/releases/tag/v0.12.8","https://vuldb.com/?ctiid.217180","https://vuldb.com/?id.217180"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-pfrm-4rjw-g9q5","url":"https://osv.dev/vulnerability/GHSA-pfrm-4rjw-g9q5"}],"summary":"string-kit Inefficient Regular Expression Complexity vulnerability"}