{"action":"Upgrade phin to 3.7.1 or later.","affected":[{"fixed":"3.7.1","introduced":"0"}],"component":"phin","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.7.1"],"ghsa_id":"GHSA-x565-32qp-m3vf","id":"tcs_01M5KGGYYHTYM2ESBB5V4SA745","modified_at":"2024-04-11T21:30:31Z","published_at":"2024-04-11T21:30:30Z","references":["https://osv.dev/vulnerability/GHSA-x565-32qp-m3vf","https://github.com/ethanent/phin/security/advisories/GHSA-x565-32qp-m3vf","https://github.com/ethanent/phin/commit/c071f95336a987dad9332fd388adeb249925cc57","https://github.com/ethanent/phin"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-x565-32qp-m3vf","url":"https://osv.dev/vulnerability/GHSA-x565-32qp-m3vf"}],"summary":"phin may include sensitive headers in subsequent requests after redirect"}