{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.48.0"}],"component":"windows-iedriver","cve_ids":["CVE-2016-10689"],"ecosystem":"npm","epss":0.01656,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w9mf-24h3-9wxf","id":"tcs_01M5KGENTC7NFH8AR7JEXN8WAK","modified_at":"2023-11-08T03:58:20.522099Z","published_at":"2019-02-18T23:41:58Z","references":["https://osv.dev/vulnerability/GHSA-w9mf-24h3-9wxf","https://nvd.nist.gov/vuln/detail/CVE-2016-10689","https://github.com/advisories/GHSA-w9mf-24h3-9wxf","https://www.npmjs.com/advisories/293"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-w9mf-24h3-9wxf","url":"https://osv.dev/vulnerability/GHSA-w9mf-24h3-9wxf"}],"summary":"Downloads Resources over HTTP in windows-iedriver"}