{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.2.14"}],"component":"thinkjs","cve_ids":["CVE-2020-21176"],"ecosystem":"npm","epss":0.01507,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q5mq-6fjg-4mw8","id":"tcs_01M5KG59JA33D9XKH99X0BHYMH","modified_at":"2023-11-08T04:02:50.927441Z","published_at":"2021-11-19T20:42:32Z","references":["https://osv.dev/vulnerability/GHSA-q5mq-6fjg-4mw8","https://nvd.nist.gov/vuln/detail/CVE-2020-21176","https://blog.jiguang.xyz/posts/thinkjs-sql-injection","https://github.com/thinkjs/thinkjs"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-q5mq-6fjg-4mw8","url":"https://osv.dev/vulnerability/GHSA-q5mq-6fjg-4mw8"}],"summary":"SQL Injection in thinkjs"}