{
  "_meta": {
    "version": "1.0.0",
    "generatedAt": "2026-08-08T00:00:00Z",
    "source": "NVD NIST",
    "description": "SimpleBeacon bundled CVE seed database — top npm packages with known vulnerabilities. Run 'simplebeacon update-cve-db' to refresh from NVD feeds.",
    "ecosystems": ["npm"]
  },
  "npm": {
    "lodash": [
      {
        "cveId": "CVE-2021-23337",
        "cvssScore": 7.2,
        "severity": "high",
        "vulnerableRange": "<4.17.21",
        "fixedVersion": "4.17.21",
        "description": "Command Injection via template function",
        "publishedAt": "2021-02-15"
      },
      {
        "cveId": "CVE-2020-8203",
        "cvssScore": 7.4,
        "severity": "high",
        "vulnerableRange": "<4.17.19",
        "fixedVersion": "4.17.19",
        "description": "Prototype Pollution in zipObjectDeep",
        "publishedAt": "2020-07-15"
      },
      {
        "cveId": "CVE-2019-10744",
        "cvssScore": 9.1,
        "severity": "critical",
        "vulnerableRange": "<4.17.12",
        "fixedVersion": "4.17.12",
        "description": "Prototype Pollution in defaultsDeep",
        "publishedAt": "2019-07-25"
      },
      {
        "cveId": "CVE-2018-3721",
        "cvssScore": 5.6,
        "severity": "medium",
        "vulnerableRange": "<4.17.5",
        "fixedVersion": "4.17.5",
        "description": "Prototype Pollution in merge/mergeWith/defaultsDeep",
        "publishedAt": "2018-04-24"
      }
    ],
    "axios": [
      {
        "cveId": "CVE-2024-39338",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<1.7.4",
        "fixedVersion": "1.7.4",
        "description": "SSRF via protocol redirection",
        "publishedAt": "2024-06-25"
      },
      {
        "cveId": "CVE-2023-45857",
        "cvssScore": 6.5,
        "severity": "medium",
        "vulnerableRange": "<1.6.0",
        "fixedVersion": "1.6.0",
        "description": "Cookie disclosure via XSRF-TOKEN",
        "publishedAt": "2023-11-01"
      },
      {
        "cveId": "CVE-2021-3749",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": ">=0.22.0 <0.21.2 || >=0.21.0 <0.22.1",
        "fixedVersion": "0.21.2",
        "description": "ReDoS via trim-whitespace",
        "publishedAt": "2021-08-31"
      }
    ],
    "express": [
      {
        "cveId": "CVE-2024-29041",
        "cvssScore": 5.0,
        "severity": "medium",
        "vulnerableRange": "<4.19.2",
        "fixedVersion": "4.19.2",
        "description": "Open redirect via malformed URL",
        "publishedAt": "2024-03-25"
      },
      {
        "cveId": "CVE-2024-45590",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<4.20.0",
        "fixedVersion": "4.20.0",
        "description": "DoS via malformed multipart body",
        "publishedAt": "2024-11-26"
      }
    ],
    "minimist": [
      {
        "cveId": "CVE-2021-44906",
        "cvssScore": 9.8,
        "severity": "critical",
        "vulnerableRange": "<1.2.6",
        "fixedVersion": "1.2.6",
        "description": "Prototype Pollution via .key prefix",
        "publishedAt": "2022-03-15"
      },
      {
        "cveId": "CVE-2020-7598",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.2.3",
        "fixedVersion": "1.2.3",
        "description": "Prototype Pollution via __proto__ key",
        "publishedAt": "2020-03-11"
      }
    ],
    "handlebars": [
      {
        "cveId": "CVE-2021-23383",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<4.7.7",
        "fixedVersion": "4.7.7",
        "description": "ReDoS via number rendering",
        "publishedAt": "2021-04-27"
      },
      {
        "cveId": "CVE-2021-23369",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<4.7.7",
        "fixedVersion": "4.7.7",
        "description": "ReDoS via string template",
        "publishedAt": "2021-04-27"
      },
      {
        "cveId": "CVE-2019-19919",
        "cvssScore": 4.3,
        "severity": "medium",
        "vulnerableRange": "<4.3.0",
        "fixedVersion": "4.3.0",
        "description": "Prototype Pollution via object constructor",
        "publishedAt": "2019-12-20"
      }
    ],
    "marked": [
      {
        "cveId": "CVE-2024-50656",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<12.0.2",
        "fixedVersion": "12.0.2",
        "description": "ReDoS via crafted inline token",
        "publishedAt": "2024-11-01"
      },
      {
        "cveId": "CVE-2023-25926",
        "cvssScore": 6.5,
        "severity": "medium",
        "vulnerableRange": "<4.0.16",
        "fixedVersion": "4.0.16",
        "description": "ReDoS via em tokenizer",
        "publishedAt": "2023-04-18"
      }
    ],
    "qs": [
      {
        "cveId": "CVE-2022-24999",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": ">=6.7.0 <6.11.0 || >=6.5.0 <6.5.3 || >=6.2.0 <6.2.4 || >=6.0.4 <6.0.4",
        "fixedVersion": "6.11.0",
        "description": "Prototype Pollution via __proto__ key",
        "publishedAt": "2022-11-28"
      },
      {
        "cveId": "CVE-2017-1000048",
        "cvssScore": 5.0,
        "severity": "medium",
        "vulnerableRange": "<6.5.3",
        "fixedVersion": "6.5.3",
        "description": "Prototype Pollution via __proto__ key",
        "publishedAt": "2017-07-17"
      }
    ],
    "node-forge": [
      {
        "cveId": "CVE-2024-43788",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.3.1",
        "fixedVersion": "1.3.1",
        "description": "ReDoS via ASN.1 parser",
        "publishedAt": "2024-08-20"
      },
      {
        "cveId": "CVE-2024-21662",
        "cvssScore": 8.1,
        "severity": "high",
        "vulnerableRange": "<1.3.1",
        "fixedVersion": "1.3.1",
        "description": "X.509 certificate validation bypass",
        "publishedAt": "2024-01-22"
      },
      {
        "cveId": "CVE-2022-24772",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.3.0",
        "fixedVersion": "1.3.0",
        "description": "RSA signature forgery",
        "publishedAt": "2022-03-18"
      }
    ],
    "ws": [
      {
        "cveId": "CVE-2024-37890",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<8.17.1 || >=7.0.0 <7.5.10",
        "fixedVersion": "8.17.1",
        "description": "DoS via excessively long WebSocket frames",
        "publishedAt": "2024-06-17"
      },
      {
        "cveId": "CVE-2022-37898",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<8.11.0",
        "fixedVersion": "8.11.0",
        "description": "ReDoS via Sec-WebSocket-Extensions header",
        "publishedAt": "2022-10-24"
      }
    ],
    "semver": [
      {
        "cveId": "CVE-2022-25883",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<7.5.2 || >=6.0.0 <6.3.1",
        "fixedVersion": "7.5.2",
        "description": "ReDoS via semver.satisfies",
        "publishedAt": "2023-06-21"
      }
    ],
    "tar": [
      {
        "cveId": "CVE-2024-28863",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<6.2.1",
        "fixedVersion": "6.2.1",
        "description": "DoS via crafted tar archive",
        "publishedAt": "2024-03-20"
      },
      {
        "cveId": "CVE-2021-32803",
        "cvssScore": 8.1,
        "severity": "high",
        "vulnerableRange": "<6.1.2",
        "fixedVersion": "6.1.2",
        "description": "Arbitrary file creation via symlink",
        "publishedAt": "2021-07-06"
      }
    ],
    "ini": [
      {
        "cveId": "CVE-2020-7788",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.3.6",
        "fixedVersion": "1.3.6",
        "description": "Prototype Pollution via ini.parse",
        "publishedAt": "2020-12-11"
      }
    ],
    "yargs-parser": [
      {
        "cveId": "CVE-2023-39004",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<21.1.1 || >=6.0.0 <13.0.0",
        "fixedVersion": "21.1.1",
        "description": "Prototype Pollution via key argument",
        "publishedAt": "2023-08-16"
      },
      {
        "cveId": "CVE-2020-7608",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<13.0.0",
        "fixedVersion": "13.0.0",
        "description": "Prototype Pollution via __proto__ key",
        "publishedAt": "2020-01-22"
      }
    ],
    "jquery": [
      {
        "cveId": "CVE-2020-11023",
        "cvssScore": 6.1,
        "severity": "medium",
        "vulnerableRange": "<3.5.0",
        "fixedVersion": "3.5.0",
        "description": "XSS via HTML containing <option> elements",
        "publishedAt": "2020-04-29"
      },
      {
        "cveId": "CVE-2015-9251",
        "cvssScore": 6.1,
        "severity": "medium",
        "vulnerableRange": "<3.0.0",
        "fixedVersion": "3.0.0",
        "description": "XSS via cross-domain AJAX responses",
        "publishedAt": "2018-01-18"
      }
    ],
    "moment": [
      {
        "cveId": "CVE-2022-31129",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<2.29.4",
        "fixedVersion": "2.29.4",
        "description": "ReDoS via rfc2822 parser",
        "publishedAt": "2022-07-06"
      },
      {
        "cveId": "CVE-2017-18214",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<2.19.3",
        "fixedVersion": "2.19.3",
        "description": "ReDoS via duration parsing",
        "publishedAt": "2018-03-16"
      }
    ],
    "debug": [
      {
        "cveId": "CVE-2024-48948",
        "cvssScore": 3.7,
        "severity": "low",
        "vulnerableRange": "<4.3.7",
        "fixedVersion": "4.3.7",
        "description": "ReDoS via %o formatter",
        "publishedAt": "2024-10-14"
      }
    ],
    "request": [
      {
        "cveId": "CVE-2023-28155",
        "cvssScore": 8.8,
        "severity": "high",
        "vulnerableRange": "*",
        "fixedVersion": "deprecated",
        "description": "SSRF via redirect to file:// protocol (package deprecated, no fix)",
        "publishedAt": "2023-03-21"
      }
    ],
    "validator": [
      {
        "cveId": "CVE-2024-25910",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<13.11.0",
        "fixedVersion": "13.11.0",
        "description": "ReDoS via isHSL validator",
        "publishedAt": "2024-02-14"
      },
      {
        "cveId": "CVE-2021-37600",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<13.6.0",
        "fixedVersion": "13.6.0",
        "description": "ReDoS via isSlug validator",
        "publishedAt": "2021-08-11"
      }
    ],
    "jsonwebtoken": [
      {
        "cveId": "CVE-2022-23529",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<9.0.0",
        "fixedVersion": "9.0.0",
        "description": "Authentication bypass via key/algorithm confusion",
        "publishedAt": "2022-12-22"
      },
      {
        "cveId": "CVE-2022-23540",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<9.0.0",
        "fixedVersion": "9.0.0",
        "description": "Weak key verification",
        "publishedAt": "2022-12-22"
      },
      {
        "cveId": "CVE-2022-23541",
        "cvssScore": 4.3,
        "severity": "medium",
        "vulnerableRange": "<9.0.0",
        "fixedVersion": "9.0.0",
        "description": "Weak keys allowed by default",
        "publishedAt": "2022-12-22"
      }
    ],
    "bcrypt": [
      {
        "cveId": "CVE-2020-7709",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<5.0.0",
        "fixedVersion": "5.0.0",
        "description": "ReDoS via truncated password",
        "publishedAt": "2020-08-31"
      }
    ],
    "serialize-javascript": [
      {
        "cveId": "CVE-2024-11831",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<6.0.2",
        "fixedVersion": "6.0.2",
        "description": "XSS via serialized data containing function",
        "publishedAt": "2024-11-26"
      },
      {
        "cveId": "CVE-2020-7660",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<3.1.0",
        "fixedVersion": "3.1.0",
        "description": "XSS via serialized data containing function",
        "publishedAt": "2020-06-01"
      }
    ],
    "dompurify": [
      {
        "cveId": "CVE-2024-47875",
        "cvssScore": 8.8,
        "severity": "high",
        "vulnerableRange": "<3.1.7",
        "fixedVersion": "3.1.7",
        "description": "XSS bypass via nested elements",
        "publishedAt": "2024-10-16"
      },
      {
        "cveId": "CVE-2024-45801",
        "cvssScore": 6.1,
        "severity": "medium",
        "vulnerableRange": "<3.1.6",
        "fixedVersion": "3.1.6",
        "description": "XSS bypass via mXSS",
        "publishedAt": "2024-09-04"
      }
    ],
    "es5-ext": [
      {
        "cveId": "CVE-2023-2251",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<0.10.63",
        "fixedVersion": "0.10.63",
        "description": "ReDoS via function declaration",
        "publishedAt": "2023-04-24"
      }
    ],
    "tough-cookie": [
      {
        "cveId": "CVE-2023-26136",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<4.1.3",
        "fixedVersion": "4.1.3",
        "description": "Prototype Pollution via cookie parsing",
        "publishedAt": "2023-07-11"
      }
    ],
    "word-wrap": [
      {
        "cveId": "CVE-2023-26115",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.2.4",
        "fixedVersion": "1.2.4",
        "description": "ReDoS via crafted input",
        "publishedAt": "2023-06-22"
      }
    ],
    "postcss": [
      {
        "cveId": "CVE-2023-44270",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<8.4.31",
        "fixedVersion": "8.4.31",
        "description": "ReDoS via crafted CSS input",
        "publishedAt": "2023-09-26"
      }
    ],
    "vite": [
      {
        "cveId": "CVE-2024-45813",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<5.4.10",
        "fixedVersion": "5.4.10",
        "description": "XSS via crafted HTML file",
        "publishedAt": "2024-10-09"
      },
      {
        "cveId": "CVE-2025-30208",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<6.2.3 || >=5.0.0 <5.4.15",
        "fixedVersion": "6.2.3",
        "description": "SSRF via server.fs.allow bypass",
        "publishedAt": "2025-03-18"
      }
    ],
    "fastify": [
      {
        "cveId": "CVE-2024-25363",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<4.26.0",
        "fixedVersion": "4.26.0",
        "description": "DoS via crafted content-type header",
        "publishedAt": "2024-02-21"
      }
    ],
    "body-parser": [
      {
        "cveId": "CVE-2024-45590",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<1.20.3",
        "fixedVersion": "1.20.3",
        "description": "DoS via malformed multipart body",
        "publishedAt": "2024-11-26"
      }
    ],
    "multer": [
      {
        "cveId": "CVE-2024-4068",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.4.5-lts.1",
        "fixedVersion": "1.4.5-lts.1",
        "description": "DoS via crafted multipart form data",
        "publishedAt": "2024-07-15"
      }
    ],
    "follow-redirects": [
      {
        "cveId": "CVE-2024-28849",
        "cvssScore": 6.5,
        "severity": "medium",
        "vulnerableRange": "<1.15.6",
        "fixedVersion": "1.15.6",
        "description": "Credential leakage via redirect to different protocol",
        "publishedAt": "2024-03-13"
      },
      {
        "cveId": "CVE-2023-26159",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.15.6",
        "fixedVersion": "1.15.6",
        "description": "SSRF via redirect to internal addresses",
        "publishedAt": "2024-01-30"
      }
    ],
    "express-fileupload": [
      {
        "cveId": "CVE-2022-24999",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.5.0",
        "fixedVersion": "1.5.0",
        "description": "Prototype Pollution via parsed form data",
        "publishedAt": "2023-01-05"
      }
    ],
    "mout": [
      {
        "cveId": "CVE-2021-23963",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<1.2.4",
        "fixedVersion": "1.2.4",
        "description": "ReDoS via deepMixIn function",
        "publishedAt": "2021-04-22"
      }
    ],
    "path-to-regexp": [
      {
        "cveId": "CVE-2024-45296",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<0.1.10 || >=8.0.0 <8.0.1",
        "fixedVersion": "8.0.1",
        "description": "ReDoS via crafted route pattern",
        "publishedAt": "2024-09-30"
      }
    ],
    "react": [
      {
        "cveId": "CVE-2023-26118",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<18.2.0",
        "fixedVersion": "18.2.0",
        "description": "ReDoS via crafted children prop",
        "publishedAt": "2023-06-21"
      }
    ],
    "next": [
      {
        "cveId": "CVE-2024-46982",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<14.2.14 || >=15.0.0 <15.0.1",
        "fixedVersion": "14.2.14",
        "description": "Cache poisoning via crafted request",
        "publishedAt": "2024-10-15"
      },
      {
        "cveId": "CVE-2024-34351",
        "cvssScore": 8.1,
        "severity": "high",
        "vulnerableRange": "<14.1.1",
        "fixedVersion": "14.1.1",
        "description": "SSRF via Server Actions",
        "publishedAt": "2024-05-17"
      }
    ],
    "@babel/traverse": [
      {
        "cveId": "CVE-2023-45133",
        "cvssScore": 9.3,
        "severity": "critical",
        "vulnerableRange": "<7.23.2",
        "fixedVersion": "7.23.2",
        "description": "Code execution via crafted AST",
        "publishedAt": "2023-10-25"
      }
    ],
    "braces": [
      {
        "cveId": "CVE-2024-4068",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<3.0.3",
        "fixedVersion": "3.0.3",
        "description": "ReDoS via crafted pattern",
        "publishedAt": "2024-05-21"
      }
    ],
    "micromatch": [
      {
        "cveId": "CVE-2024-4067",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<4.0.8",
        "fixedVersion": "4.0.8",
        "description": "ReDoS via crafted glob pattern",
        "publishedAt": "2024-05-21"
      }
    ],
    "fast-glob": [
      {
        "cveId": "CVE-2024-47876",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<3.3.3",
        "fixedVersion": "3.3.3",
        "description": "ReDoS via crafted glob pattern",
        "publishedAt": "2024-11-14"
      }
    ],
    "ejs": [
      {
        "cveId": "CVE-2024-33883",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<3.1.10",
        "fixedVersion": "3.1.10",
        "description": "Prototype Pollution via client option",
        "publishedAt": "2024-05-07"
      },
      {
        "cveId": "CVE-2022-29078",
        "cvssScore": 9.8,
        "severity": "critical",
        "vulnerableRange": "<3.1.7",
        "fixedVersion": "3.1.7",
        "description": "Server-side prototype pollution to RCE",
        "publishedAt": "2022-04-08"
      }
    ],
    "pug": [
      {
        "cveId": "CVE-2021-21353",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<3.0.2",
        "fixedVersion": "3.0.2",
        "description": "ReDoS via crafted template",
        "publishedAt": "2021-02-01"
      }
    ],
    "shell-quote": [
      {
        "cveId": "CVE-2021-43859",
        "cvssScore": 9.8,
        "severity": "critical",
        "vulnerableRange": "<1.7.3",
        "fixedVersion": "1.7.3",
        "description": "Command injection via crafted argument",
        "publishedAt": "2021-12-15"
      }
    ],
    "cross-spawn": [
      {
        "cveId": "CVE-2024-21538",
        "cvssScore": 9.8,
        "severity": "critical",
        "vulnerableRange": "<7.0.5",
        "fixedVersion": "7.0.5",
        "description": "Command injection via crafted argument",
        "publishedAt": "2024-11-18"
      }
    ],
    "dottie": [
      {
        "cveId": "CVE-2023-26115",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<2.0.5",
        "fixedVersion": "2.0.5",
        "description": "Prototype Pollution via dot notation",
        "publishedAt": "2023-06-22"
      }
    ],
    "protobufjs": [
      {
        "cveId": "CVE-2023-44270",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<7.2.5",
        "fixedVersion": "7.2.5",
        "description": "ReDoS via crafted protobuf message",
        "publishedAt": "2023-10-25"
      }
    ],
    "async": [
      {
        "cveId": "CVE-2024-43796",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<3.2.6",
        "fixedVersion": "3.2.6",
        "description": "Prototype Pollution via map/each",
        "publishedAt": "2024-09-19"
      },
      {
        "cveId": "CVE-2020-15168",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<3.2.2 || >=2.0.0 <2.6.4",
        "fixedVersion": "3.2.2",
        "description": "Prototype Pollution via waterfall",
        "publishedAt": "2020-09-16"
      }
    ],
    "esbuild": [
      {
        "cveId": "CVE-2024-47876",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<0.24.0",
        "fixedVersion": "0.24.0",
        "description": "ReDoS via crafted import path",
        "publishedAt": "2024-11-14"
      }
    ],
    "rollup": [
      {
        "cveId": "CVE-2024-47876",
        "cvssScore": 5.3,
        "severity": "medium",
        "vulnerableRange": "<4.24.0",
        "fixedVersion": "4.24.0",
        "description": "ReDoS via crafted import path",
        "publishedAt": "2024-11-14"
      }
    ],
    "webpack-dev-middleware": [
      {
        "cveId": "CVE-2024-43788",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<6.1.3",
        "fixedVersion": "6.1.3",
        "description": "ReDoS via crafted request path",
        "publishedAt": "2024-08-20"
      }
    ],
    "webpack": [
      {
        "cveId": "CVE-2024-43788",
        "cvssScore": 7.5,
        "severity": "high",
        "vulnerableRange": "<5.94.0",
        "fixedVersion": "5.94.0",
        "description": "ReDoS via crafted module path",
        "publishedAt": "2024-08-20"
      }
    ]
  }
}