{"action":"Upgrade moment-timezone to 0.5.35 or later.","affected":[{"fixed":"0.5.35","introduced":"0.1.0"}],"component":"moment-timezone","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.5.35"],"ghsa_id":"GHSA-v78c-4p63-2j6c","id":"tcs_01M5KGB519KYDVC315C6FKM96V","modified_at":"2022-08-30T20:28:43Z","published_at":"2022-08-30T20:28:43Z","references":["https://osv.dev/vulnerability/GHSA-v78c-4p63-2j6c","https://github.com/moment/moment-timezone/security/advisories/GHSA-v78c-4p63-2j6c","https://github.com/moment/moment-timezone/commit/7915ac567ab19700e44ad6b5d8ef0b85e48a9e75","https://github.com/moment/moment-timezone"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v78c-4p63-2j6c","url":"https://osv.dev/vulnerability/GHSA-v78c-4p63-2j6c"}],"summary":"Cleartext Transmission of Sensitive Information in moment-timezone"}