{"action":"Upgrade libp2p-secio to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"libp2p-secio","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-rch7-f4h5-x9rj","id":"tcs_01M5KG8RTCY3EWEPDMM5GTC4FM","modified_at":"2021-08-17T21:32:42Z","published_at":"2019-08-23T00:04:52Z","references":["https://osv.dev/vulnerability/GHSA-rch7-f4h5-x9rj","https://github.com/libp2p/js-libp2p-secio/pull/95","https://snyk.io/vuln/npm:libp2p-secio:20180115","https://www.npmjs.com/advisories/558"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-rch7-f4h5-x9rj","url":"https://osv.dev/vulnerability/GHSA-rch7-f4h5-x9rj"}],"summary":"Identity Spoofing in libp2p-secio"}