{"action":"Upgrade terminal-kit to 2.1.8 or later.","affected":[{"fixed":"2.1.8","introduced":"0"}],"component":"terminal-kit","cve_ids":["CVE-2021-4306"],"ecosystem":"npm","epss":0.0099,"exploited":false,"fixed_versions":["2.1.8"],"ghsa_id":"GHSA-wxgh-8gmr-3qh3","id":"tcs_01M5KGGAEF0DWA9TS5BGSH6NRA","modified_at":"2023-11-08T04:07:08.484865Z","published_at":"2023-01-07T18:30:20Z","references":["https://osv.dev/vulnerability/GHSA-wxgh-8gmr-3qh3","https://nvd.nist.gov/vuln/detail/CVE-2021-4306","https://github.com/cronvel/terminal-kit/commit/a2e446cc3927b559d0281683feb9b821e83b758c","https://github.com/cronvel/terminal-kit","https://github.com/cronvel/terminal-kit/releases/tag/v2.1.8","https://vuldb.com/?ctiid.217620","https://vuldb.com/?id.217620"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wxgh-8gmr-3qh3","url":"https://osv.dev/vulnerability/GHSA-wxgh-8gmr-3qh3"}],"summary":"terminal-kit Inefficient Regular Expression Complexity vulnerability"}