{"action":"Upgrade png-img to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"0"}],"component":"png-img","cve_ids":["CVE-2020-28248"],"ecosystem":"npm","epss":0.02216,"exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-q5wr-fvpq-p67g","id":"tcs_01M5KG5BC7N8X358ZCDRAB66XR","modified_at":"2023-11-08T04:03:24.222139Z","published_at":"2021-12-10T17:23:30Z","references":["https://osv.dev/vulnerability/GHSA-q5wr-fvpq-p67g","https://nvd.nist.gov/vuln/detail/CVE-2020-28248","https://github.com/gemini-testing/png-img/commit/14ac462a32ca4b3b78f56502ac976d5b0222ce3d","https://github.com/gemini-testing/png-img","https://github.com/gemini-testing/png-img/compare/v3.0.0...v3.1.0","https://securitylab.github.com/advisories/GHSL-2020-142-gemini-png-img"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-q5wr-fvpq-p67g","url":"https://osv.dev/vulnerability/GHSA-q5wr-fvpq-p67g"}],"summary":"Integer Overflow in png-img"}