{"action":"Upgrade jpv to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"jpv","cve_ids":["CVE-2019-19507"],"ecosystem":"npm","epss":0.00974,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-rh46-3fgc-mvrf","id":"tcs_01M5KG93Z661N6R7NM7F6MB9PW","modified_at":"2023-11-08T04:01:28.483830Z","published_at":"2019-12-04T21:25:28Z","references":["https://osv.dev/vulnerability/GHSA-rh46-3fgc-mvrf","https://nvd.nist.gov/vuln/detail/CVE-2019-19507","https://github.com/manvel-khnkoyan/jpv/issues/6","https://www.npmjs.com/package/jpv"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rh46-3fgc-mvrf","url":"https://osv.dev/vulnerability/GHSA-rh46-3fgc-mvrf"}],"summary":"Validation bypass is possible in Json Pattern Validator"}