{"action":"Upgrade underscore.string to 3.3.5 or later.","affected":[{"fixed":"3.3.5","introduced":"0"}],"component":"underscore.string","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.3.5"],"ghsa_id":"GHSA-v2p6-4mp7-3r9v","id":"tcs_01M5KGAE70JVS3EAZGEDZRRX8M","modified_at":"2020-08-31T18:34:16Z","published_at":"2019-06-14T16:26:22Z","references":["https://osv.dev/vulnerability/GHSA-v2p6-4mp7-3r9v","https://github.com/epeli/underscore.string/issues/510","https://github.com/epeli/underscore.string/pull/517","https://github.com/epeli/underscore.string/commit/f486cd684c94c12db48b45d52b1472a1b9661029","https://www.npmjs.com/advisories/745"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v2p6-4mp7-3r9v","url":"https://osv.dev/vulnerability/GHSA-v2p6-4mp7-3r9v"}],"summary":"Regular Expression Denial of Service in underscore.string"}