{"action":"Upgrade js-yaml to 2.0.5 or later.","affected":[{"fixed":"2.0.5","introduced":"0"}],"component":"js-yaml","cve_ids":["CVE-2013-4660"],"ecosystem":"npm","epss":0.17321,"exploited":false,"fixed_versions":["2.0.5"],"ghsa_id":"GHSA-xxvw-45rp-3mj2","id":"tcs_01M5KGK9AAPTK587RHKVDBCFPZ","modified_at":"2023-11-08T03:57:24.142876Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-xxvw-45rp-3mj2","https://nvd.nist.gov/vuln/detail/CVE-2013-4660","https://github.com/advisories/GHSA-xxvw-45rp-3mj2","https://nealpoole.com/blog/2013/06/code-execution-via-yaml-in-js-yaml-nodejs-module","https://www.npmjs.com/advisories/16"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-xxvw-45rp-3mj2","url":"https://osv.dev/vulnerability/GHSA-xxvw-45rp-3mj2"}],"summary":"Deserialization Code Execution in js-yaml"}