{"action":"Upgrade canvas to 1.6.10 or later.","affected":[{"fixed":"1.6.10","introduced":"0"}],"component":"canvas","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.6.10"],"ghsa_id":"GHSA-vpq5-4rc8-c222","id":"tcs_01M5KGCMG3W3N7ASQX2MWSMRG5","modified_at":"2020-08-31T18:36:22Z","published_at":"2019-06-05T14:10:45Z","references":["https://osv.dev/vulnerability/GHSA-vpq5-4rc8-c222","https://github.com/Automattic/node-canvas/commit/c3e4ccb1c404da01e83fe5eb3626bf55f7f55957","https://hackerone.com/reports/315037","https://www.npmjs.com/advisories/804"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vpq5-4rc8-c222","url":"https://osv.dev/vulnerability/GHSA-vpq5-4rc8-c222"}],"summary":"Denial of Service in canvas"}