{"action":"Upgrade expo to 9.1.0 or later.","affected":[{"fixed":"9.1.0","introduced":"0"}],"component":"expo","cve_ids":["CVE-2020-24653"],"ecosystem":"npm","epss":0.0117,"exploited":false,"fixed_versions":["9.1.0"],"ghsa_id":"GHSA-rwx9-wqj8-vr77","id":"tcs_01M5KGA61KSX4X9008DWN5ANH2","modified_at":"2023-11-08T04:03:08.308599Z","published_at":"2022-05-24T17:26:43Z","references":["https://osv.dev/vulnerability/GHSA-rwx9-wqj8-vr77","https://nvd.nist.gov/vuln/detail/CVE-2020-24653","https://github.com/expo/expo/pull/9264","https://github.com/expo/expo/commit/1d82bf07fae2c96273e9189997e521359cffc1a9#diff-5b2820f378da980bd8a8185e2e1b2f9ce085d834534483f29c67932f282cc5c9","https://github.com/expo/expo","https://github.com/expo/expo/blob/main/packages/expo-secure-store/CHANGELOG.md"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rwx9-wqj8-vr77","url":"https://osv.dev/vulnerability/GHSA-rwx9-wqj8-vr77"}],"summary":"Expo on iOS is insecure due incorrect security attribute application"}