{"action":"Upgrade config-shield to 0.2.3 or later.","affected":[{"fixed":"0.2.3","introduced":"0"}],"component":"config-shield","cve_ids":["CVE-2021-26276"],"ecosystem":"npm","epss":0.01222,"exploited":false,"fixed_versions":["0.2.3"],"ghsa_id":"GHSA-w8h4-vw8f-rvvj","id":"tcs_01M5KGEGSDK0S58DN9Z1T73PT6","modified_at":"2023-11-08T04:05:20.594750Z","published_at":"2021-04-13T15:30:09Z","references":["https://osv.dev/vulnerability/GHSA-w8h4-vw8f-rvvj","https://nvd.nist.gov/vuln/detail/CVE-2021-26276","https://github.com/godaddy/node-config-shield/commit/cdba5d3a7accd661ffbc52e208153464bd0d9da6","https://advisory.checkmarx.net/advisory/CX-2021-4773","https://github.com/godaddy/node-config-shield"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w8h4-vw8f-rvvj","url":"https://osv.dev/vulnerability/GHSA-w8h4-vw8f-rvvj"}],"summary":"Improper Control of Dynamically-Managed Code Resources in config-shield"}