{"action":"Upgrade socket.io to 0.9.7 or later.","affected":[{"fixed":"0.9.7","introduced":"0"}],"component":"socket.io","cve_ids":["CVE-2017-16031"],"ecosystem":"npm","epss":0.01969,"exploited":false,"fixed_versions":["0.9.7"],"ghsa_id":"GHSA-qv2v-m59f-v5fw","id":"tcs_01M5KG73VJJMS6JPY0RCZB41S6","modified_at":"2023-11-08T03:59:00.679957Z","published_at":"2018-11-07T00:29:37Z","references":["https://osv.dev/vulnerability/GHSA-qv2v-m59f-v5fw","https://nvd.nist.gov/vuln/detail/CVE-2017-16031","https://github.com/socketio/socket.io/issues/856","https://github.com/socketio/socket.io/pull/857","https://github.com/socketio/socket.io/commit/67b4eb9abdf111dfa9be4176d1709374a2b4ded8","https://github.com/advisories/GHSA-qv2v-m59f-v5fw","https://github.com/socketio/socket.io","https://www.npmjs.com/advisories/321"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qv2v-m59f-v5fw","url":"https://osv.dev/vulnerability/GHSA-qv2v-m59f-v5fw"}],"summary":"Insecure randomness in socket.io"}