{"action":"Upgrade install-nw to 1.1.5 or later.","affected":[{"fixed":"1.1.5","introduced":"0"}],"component":"install-nw","cve_ids":["CVE-2016-10566"],"ecosystem":"npm","epss":0.01625,"exploited":false,"fixed_versions":["1.1.5"],"ghsa_id":"GHSA-wq7q-7vfh-2x3h","id":"tcs_01M5KGFPMT0NHH87E1ZBEKFVKH","modified_at":"2023-11-08T03:58:12.997528Z","published_at":"2019-02-18T23:54:09Z","references":["https://osv.dev/vulnerability/GHSA-wq7q-7vfh-2x3h","https://nvd.nist.gov/vuln/detail/CVE-2016-10566","https://github.com/advisories/GHSA-wq7q-7vfh-2x3h","https://www.npmjs.com/advisories/204"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-wq7q-7vfh-2x3h","url":"https://osv.dev/vulnerability/GHSA-wq7q-7vfh-2x3h"}],"summary":"install-nw downloads Resources over HTTP"}