{"action":"Upgrade printf to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"printf","cve_ids":["CVE-2021-23354"],"ecosystem":"npm","epss":0.02176,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-xfhp-gmh8-r8v2","id":"tcs_01M5KGHTVC5KXWNCX5WF1RV7DE","modified_at":"2026-07-08T06:50:03.433452551Z","published_at":"2021-03-19T21:22:10Z","references":["https://osv.dev/vulnerability/GHSA-xfhp-gmh8-r8v2","https://nvd.nist.gov/vuln/detail/CVE-2021-23354","https://github.com/adaltas/node-printf/issues/31","https://github.com/adaltas/node-printf/pull/32","https://github.com/adaltas/node-printf/commit/a8502e7c9b0b22555696a2d8ef67722086413a68","https://snyk.io/vuln/SNYK-JS-PRINTF-1072096"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xfhp-gmh8-r8v2","url":"https://osv.dev/vulnerability/GHSA-xfhp-gmh8-r8v2"}],"summary":"printf vulnerable to Regular Expression Denial of Service (ReDoS)"}