{"action":"Upgrade pg to 2.11.2 or later.","affected":[{"fixed":"2.11.2","introduced":"0"},{"fixed":"3.6.4","introduced":"3.0.0"},{"fixed":"4.5.7","introduced":"4.0.0"},{"fixed":"5.2.1","introduced":"5.0.0"},{"fixed":"6.0.5","introduced":"6.0.0"},{"fixed":"6.1.6","introduced":"6.1.0"},{"fixed":"6.2.5","introduced":"6.2.0"},{"fixed":"6.3.3","introduced":"6.3.0"},{"fixed":"6.4.2","introduced":"6.4.0"},{"fixed":"7.0.2","introduced":"7.0.0"},{"fixed":"7.1.2","introduced":"7.1.0"}],"component":"pg","cve_ids":["CVE-2017-16082"],"ecosystem":"npm","epss":0.1045,"exploited":false,"fixed_versions":["2.11.2","3.6.4","4.5.7","5.2.1","6.0.5","6.1.6","6.2.5","6.3.3","6.4.2","7.0.2","7.1.2"],"ghsa_id":"GHSA-wc9v-mj63-m9g5","id":"tcs_01M5KGERE7MTFASMD0D55MRVBY","modified_at":"2023-11-08T03:59:03.759366Z","published_at":"2018-07-24T19:44:42Z","references":["https://osv.dev/vulnerability/GHSA-wc9v-mj63-m9g5","https://nvd.nist.gov/vuln/detail/CVE-2017-16082","https://github.com/advisories/GHSA-wc9v-mj63-m9g5","https://node-postgres.com/announcements#2017-08-12-code-execution-vulnerability","https://www.npmjs.com/advisories/521"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wc9v-mj63-m9g5","url":"https://osv.dev/vulnerability/GHSA-wc9v-mj63-m9g5"}],"summary":"Remote Code Execution in pg"}