{"action":"Upgrade flood to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"2.0.0"}],"component":"flood","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-r587-7jh2-4qr3","id":"tcs_01M5KG802X68W2BP3C94NNC966","modified_at":"2022-09-09T20:56:50Z","published_at":"2020-08-26T19:32:50Z","references":["https://osv.dev/vulnerability/GHSA-r587-7jh2-4qr3","https://github.com/jesec/flood/security/advisories/GHSA-r587-7jh2-4qr3","https://github.com/jesec/flood/commit/103f53c8d2963584e41bcf46ccc6fe0fabf179ca","https://github.com/jesec/flood/commit/d137107ac908526d43966607149fbaf00cfcedf0","https://github.com/jesec/flood"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-r587-7jh2-4qr3","url":"https://osv.dev/vulnerability/GHSA-r587-7jh2-4qr3"}],"summary":"Server secret was included in static assets and served to clients"}