{"action":"Upgrade @solid/identity-token-verifier to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"@solid/identity-token-verifier","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-xmh9-rg6f-j3mr","id":"tcs_01M5KGJBZVW05YD4Z4N00KS4YG","modified_at":"2021-03-10T04:01:48Z","published_at":"2021-03-12T22:39:01Z","references":["https://osv.dev/vulnerability/GHSA-xmh9-rg6f-j3mr","https://github.com/solid/identity-token-verifier/security/advisories/GHSA-xmh9-rg6f-j3mr","https://github.com/solid/identity-token-verifier/commit/fbdeb4aa8c12694b3744cd0454acb826817d9e6c","https://github.com/solid/identity-token-verifier/releases/tag/0.5.2","https://www.npmjs.com/package/@solid/identity-token-verifier"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-xmh9-rg6f-j3mr","url":"https://osv.dev/vulnerability/GHSA-xmh9-rg6f-j3mr"}],"summary":"Verification flaw in Solid identity-token-verifier"}