{"id":"GHSA-7fhm-mqm4-2wp7","summary":"Withdrawn: ESLint dependencies are vulnerable (ReDoS and Prototype Pollution)","details":"**Withdrawn**\nGitHub has withdrawn this advisory in place of GHSA-vh95-rmgr-6w4m and GHSA-6chw-6frg-f759.\nThe reason for withdrawing is that some mistakes were made during the ingestion of CVE-2020-7598\nwhich caused this advisory to be published with incorrect information.\n\nIn order to provide accurate advisory information, new advisories were created:\n\n- minimist: https://github.com/advisories/GHSA-vh95-rmgr-6w4m\n- acorn: https://github.com/advisories/GHSA-6chw-6frg-f759","modified":"2020-04-03T21:54:52Z","published":"2020-03-13T20:36:16Z","withdrawn":"2020-04-03T21:47:06Z","database_specific":{"github_reviewed_at":"2020-03-13T20:21:06Z","nvd_published_at":null,"cwe_ids":[],"severity":"MODERATE","github_reviewed":true},"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6chw-6frg-f759"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vh95-rmgr-6w4m"}],"affected":[{"package":{"name":"minimist","ecosystem":"npm","purl":"pkg:npm/minimist"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.2.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/03/GHSA-7fhm-mqm4-2wp7/GHSA-7fhm-mqm4-2wp7.json"}},{"package":{"name":"acorn","ecosystem":"npm","purl":"pkg:npm/acorn"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"5.7.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/03/GHSA-7fhm-mqm4-2wp7/GHSA-7fhm-mqm4-2wp7.json"}},{"package":{"name":"acorn","ecosystem":"npm","purl":"pkg:npm/acorn"},"ranges":[{"type":"SEMVER","events":[{"introduced":"6.0.0"},{"fixed":"6.4.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/03/GHSA-7fhm-mqm4-2wp7/GHSA-7fhm-mqm4-2wp7.json"}},{"package":{"name":"acorn","ecosystem":"npm","purl":"pkg:npm/acorn"},"ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.1.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/03/GHSA-7fhm-mqm4-2wp7/GHSA-7fhm-mqm4-2wp7.json"}},{"package":{"name":"acorn","ecosystem":"npm","purl":"pkg:npm/acorn"},"ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.1.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/03/GHSA-7fhm-mqm4-2wp7/GHSA-7fhm-mqm4-2wp7.json"}}],"schema_version":"1.9.0"}