{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "grpc-ts-health-check"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2020-08-31T18:47:07Z",
    "nvd_published_at": null,
    "severity": "LOW"
  },
  "details": "Versions of `grpc-ts-health-check` prior to 2.0.0 are vulnerable to Denial of Service. The package exposes an API endpoint that may allow attackers to set the service\u0027s health status to failing. This can lead to Denial of Service as Kubernetes blocks traffic to services with a failing status.\n\n\n## Recommendation\n\nUpgrade to version 2.0.0 or later.",
  "id": "GHSA-m86m-5m44-pc93",
  "modified": "2020-08-31T18:47:07Z",
  "published": "2020-09-03T19:05:46Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.npmjs.com/advisories/1097"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Denial of Service in grpc-ts-health-check"
}