{"action":"Upgrade smol-toml to 1.3.1 or later.","affected":[{"fixed":"1.3.1","introduced":"0"}],"component":"smol-toml","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.3.1"],"ghsa_id":"GHSA-pqhp-25j4-6hq9","id":"tcs_01M5KG48CWR05N0ZSM15MB966J","modified_at":"2024-11-22T20:40:49Z","published_at":"2024-11-22T20:40:49Z","references":["https://osv.dev/vulnerability/GHSA-pqhp-25j4-6hq9","https://github.com/squirrelchat/smol-toml/security/advisories/GHSA-pqhp-25j4-6hq9","https://github.com/squirrelchat/smol-toml/commit/405108ba090f0fc78f99aa2f0d6721e499b0ff27","https://github.com/squirrelchat/smol-toml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pqhp-25j4-6hq9","url":"https://osv.dev/vulnerability/GHSA-pqhp-25j4-6hq9"}],"summary":"smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables"}