{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.5"}],"component":"speaker","cve_ids":["CVE-2024-21526"],"ecosystem":"npm","epss":0.0057,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w5fc-gj3h-26rx","id":"tcs_01M5KGE0E8NQR30G3GWF82XWR2","modified_at":"2024-07-11T17:25:31Z","published_at":"2024-07-10T06:33:52Z","references":["https://osv.dev/vulnerability/GHSA-w5fc-gj3h-26rx","https://nvd.nist.gov/vuln/detail/CVE-2024-21526","https://github.com/TooTallNate/node-speaker","https://github.com/TooTallNate/node-speaker/blob/316afff5a393fce438cf7296011fcfc6e12aa9dc/src/binding.c#L48","https://security.snyk.io/vuln/SNYK-JS-SPEAKER-6370676"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-w5fc-gj3h-26rx","url":"https://osv.dev/vulnerability/GHSA-w5fc-gj3h-26rx"}],"summary":"speaker vulnerable to Denial of Service"}