{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "http-live-simulator"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2020-08-31T18:50:28Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
  },
  "details": "Versions of `http-live-simulator` prior to 1.0.8 are vulnerable to Denial of Service. The package fails to catch an exception that causes the Node process to crash, effectively shutting down the server. This allows an attacker to send an HTTP request that crashes the server.\n\n\n## Recommendation\n\nUpgrade to version 1.0.8 or later.",
  "id": "GHSA-xgp2-cc4r-7vf6",
  "modified": "2020-08-31T18:50:28Z",
  "published": "2020-09-03T20:44:21Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://hackerone.com/reports/627376"
    },
    {
      "type": "WEB",
      "url": "https://www.npmjs.com/advisories/1189"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Denial of Service in http-live-simulator"
}