{"action":"Upgrade nitrado.js to 0.2.5 or later.","affected":[{"fixed":"0.2.5","introduced":"0"}],"component":"nitrado.js","cve_ids":["CVE-2022-36034"],"ecosystem":"npm","epss":0.00944,"exploited":false,"fixed_versions":["0.2.5"],"ghsa_id":"GHSA-vqc4-v8hc-h2jg","id":"tcs_01M5KGCNVZ8Y7YZZP02Y8S0771","modified_at":"2023-11-08T04:09:58.481300Z","published_at":"2022-08-31T22:23:39Z","references":["https://osv.dev/vulnerability/GHSA-vqc4-v8hc-h2jg","https://github.com/cainthebest/nitrado.js/security/advisories/GHSA-vqc4-v8hc-h2jg","https://nvd.nist.gov/vuln/detail/CVE-2022-36034","https://github.com/cainthebest/nitrado.js","https://github.com/cainthebest/nitrado.js/blob/v0.2.5/CHANGELOG.md"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vqc4-v8hc-h2jg","url":"https://osv.dev/vulnerability/GHSA-vqc4-v8hc-h2jg"}],"summary":"Polynomial regular expression used on uncontrolled data in nitrado.js"}