{"action":"Upgrade ms to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"0"}],"component":"ms","cve_ids":["CVE-2017-20162"],"ecosystem":"npm","epss":0.01018,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-w9mr-4mfr-499f","id":"tcs_01M5KGEP8VT77HZ0ZZ7M21T1NJ","modified_at":"2025-11-04T16:42:14Z","published_at":"2023-01-05T12:30:27Z","references":["https://osv.dev/vulnerability/GHSA-w9mr-4mfr-499f","https://nvd.nist.gov/vuln/detail/CVE-2017-20162","https://github.com/vercel/ms/pull/89","https://github.com/vercel/ms/commit/caae2988ba2a37765d055c4eee63d383320ee662","https://github.com/vercel/ms","https://github.com/vercel/ms/releases/tag/2.0.0","https://security.netapp.com/advisory/ntap-20241108-0002","https://vuldb.com/?ctiid.217451","https://vuldb.com/?id.217451"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w9mr-4mfr-499f","url":"https://osv.dev/vulnerability/GHSA-w9mr-4mfr-499f"}],"summary":"Vercel ms Inefficient Regular Expression Complexity vulnerability"}