{"action":"Upgrade angular-jwt to 0.1.10 or later.","affected":[{"fixed":"0.1.10","introduced":"0"}],"component":"angular-jwt","cve_ids":["CVE-2018-11537"],"ecosystem":"npm","epss":0.01137,"exploited":false,"fixed_versions":["0.1.10"],"ghsa_id":"GHSA-vm2p-f5j4-mj6g","id":"tcs_01M5KGC7MXZH8ZVB81P0QH4TRD","modified_at":"2023-11-08T03:59:46.207795Z","published_at":"2022-05-14T03:05:44Z","references":["https://osv.dev/vulnerability/GHSA-vm2p-f5j4-mj6g","https://nvd.nist.gov/vuln/detail/CVE-2018-11537","https://github.com/auth0/angular-jwt/pull/174","https://github.com/auth0/angular-jwt/commit/a4f03b49c3fb47cc6375c2a33b5ac11ca3c606f0","https://github.com/auth0/angular-jwt/commit/e368cf124443507f1710f60ae855c4c54eebc6ea","https://auth0.com/docs/security/bulletins/cve-2018-11537","https://github.com/auth0/angular-jwt"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vm2p-f5j4-mj6g","url":"https://osv.dev/vulnerability/GHSA-vm2p-f5j4-mj6g"}],"summary":"Auth0 angular-jwt misinterprets allowlist as regex"}