{
"id": "GHSA-7fhm-mqm4-2wp7",
"aliases": [],
"details": "**Withdrawn**\nGitHub has withdrawn this advisory in place of GHSA-vh95-rmgr-6w4m and GHSA-6chw-6frg-f759.\nThe reason for withdrawing is that some mistakes were made during the ingestion of CVE-2020-7598\nwhich caused this advisory to be published with incorrect information.\n\nIn order to provide accurate advisory information, new advisories were created:\n\n- minimist: https://github.com/advisories/GHSA-vh95-rmgr-6w4m\n- acorn: https://github.com/advisories/GHSA-6chw-6frg-f759",
"summary": "Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.2"
}
]
}
],
"package": {
"name": "minimist",
"ecosystem": "npm"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.7.4"
}
]
}
],
"package": {
"name": "acorn",
"ecosystem": "npm"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.0.0"
},
{
"fixed": "6.4.1"
}
]
}
],
"package": {
"name": "acorn",
"ecosystem": "npm"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.1.1"
}
]
}
],
"package": {
"name": "acorn",
"ecosystem": "npm"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.0"
},
{
"fixed": "7.1.1"
}
]
}
],
"package": {
"name": "acorn",
"ecosystem": "npm"
}
}
],
"modified": "2020-04-03T21:54:52Z",
"severity": [],
"published": "2020-03-13T20:36:16Z",
"withdrawn": "2020-04-03T21:47:06Z",
"references": [
{
"url": "https://github.com/advisories/GHSA-6chw-6frg-f759",
"type": "ADVISORY"
},
{
"url": "https://github.com/advisories/GHSA-vh95-rmgr-6w4m",
"type": "ADVISORY"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [],
"severity": "MODERATE",
"github_reviewed": true,
"nvd_published_at": null,
"github_reviewed_at": "2020-03-13T20:21:06Z"
}
}