{"action":"Upgrade http-signature to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"http-signature","cve_ids":["CVE-2017-16005"],"ecosystem":"npm","epss":0.00844,"exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-q257-vv4p-fg92","id":"tcs_01M5KG4SV1PN1BWWVP61M7ZZM3","modified_at":"2023-11-08T03:58:59.280300Z","published_at":"2018-11-09T17:49:34Z","references":["https://osv.dev/vulnerability/GHSA-q257-vv4p-fg92","https://nvd.nist.gov/vuln/detail/CVE-2017-16005","https://github.com/joyent/node-http-signature/issues/10","https://github.com/advisories/GHSA-q257-vv4p-fg92","https://www.npmjs.com/advisories/318"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q257-vv4p-fg92","url":"https://osv.dev/vulnerability/GHSA-q257-vv4p-fg92"}],"summary":"Header Forgery in http-signature"}