{"action":"Upgrade tar-fs to 1.16.2 or later.","affected":[{"fixed":"1.16.2","introduced":"0"}],"component":"tar-fs","cve_ids":["CVE-2018-20835"],"ecosystem":"npm","epss":0.02359,"exploited":false,"fixed_versions":["1.16.2"],"ghsa_id":"GHSA-x2mc-8fgj-3wmr","id":"tcs_01M5KGGJ79HF0YFPHXCRXM62F5","modified_at":"2023-11-08T04:00:12.892530Z","published_at":"2019-05-01T18:37:18Z","references":["https://osv.dev/vulnerability/GHSA-x2mc-8fgj-3wmr","https://nvd.nist.gov/vuln/detail/CVE-2018-20835","https://github.com/mafintosh/tar-fs/commit/06672828e6fa29ac8551b1b6f36c852a9a3c58a2","https://hackerone.com/reports/344595","https://github.com/mafintosh/tar-fs/compare/d590fc7...a35ce2f"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x2mc-8fgj-3wmr","url":"https://osv.dev/vulnerability/GHSA-x2mc-8fgj-3wmr"}],"summary":"Improper Input Validation in tar-fs"}