{
  "advisoryKey": "GHSA-qqqq-wwww-eeee",
  "affectedPackages": [
    {
      "type": "semver",
      "identifier": "npm:conflict/package",
      "platform": null,
      "versionRanges": [
        {
          "fixedVersion": "1.4.0",
          "introducedVersion": null,
          "lastAffectedVersion": null,
          "primitives": {
            "evr": null,
            "hasVendorExtensions": true,
            "nevra": null,
            "semVer": {
              "constraintExpression": "< 1.4.0",
              "exactValue": null,
              "fixed": "1.4.0",
              "fixedInclusive": false,
              "introduced": null,
              "introducedInclusive": true,
              "lastAffected": null,
              "lastAffectedInclusive": false,
              "style": "lessThan"
            },
            "vendorExtensions": {
              "ecosystem": "npm",
              "package": "conflict/package"
            }
          },
          "provenance": {
            "source": "ghsa",
            "kind": "affected-range",
            "value": "npm:conflict/package",
            "decisionReason": null,
            "recordedAt": "2025-03-04T08:30:00+00:00",
            "fieldMask": [
              "affectedpackages[].versionranges[]"
            ]
          },
          "rangeExpression": "< 1.4.0",
          "rangeKind": "semver"
        }
      ],
      "normalizedVersions": [
        {
          "scheme": "semver",
          "type": "lt",
          "min": null,
          "minInclusive": null,
          "max": "1.4.0",
          "maxInclusive": false,
          "value": null,
          "notes": "ghsa:npm:conflict/package"
        }
      ],
      "statuses": [
        {
          "provenance": {
            "source": "ghsa",
            "kind": "affected-status",
            "value": "npm:conflict/package",
            "decisionReason": null,
            "recordedAt": "2025-03-04T08:30:00+00:00",
            "fieldMask": [
              "affectedpackages[].statuses[]"
            ]
          },
          "status": "affected"
        }
      ],
      "provenance": [
        {
          "source": "ghsa",
          "kind": "affected",
          "value": "npm:conflict/package",
          "decisionReason": null,
          "recordedAt": "2025-03-04T08:30:00+00:00",
          "fieldMask": [
            "affectedpackages[]"
          ]
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2025-4242",
    "GHSA-qqqq-wwww-eeee"
  ],
  "canonicalMetricId": null,
  "credits": [
    {
      "displayName": "maintainer-team",
      "role": "remediation_developer",
      "contacts": [
        "https://github.com/conflict/package"
      ],
      "provenance": {
        "source": "ghsa",
        "kind": "credit",
        "value": "maintainer-team",
        "decisionReason": null,
        "recordedAt": "2025-03-04T08:30:00+00:00",
        "fieldMask": [
          "credits[]"
        ]
      }
    },
    {
      "displayName": "security-researcher",
      "role": "reporter",
      "contacts": [
        "https://github.com/sec-researcher"
      ],
      "provenance": {
        "source": "ghsa",
        "kind": "credit",
        "value": "security-researcher",
        "decisionReason": null,
        "recordedAt": "2025-03-04T08:30:00+00:00",
        "fieldMask": [
          "credits[]"
        ]
      }
    }
  ],
  "cvssMetrics": [],
  "cwes": [],
  "description": "Container escape vulnerability allowing privilege escalation in conflict-package.",
  "exploitKnown": false,
  "language": "en",
  "modified": "2025-03-02T12:00:00+00:00",
  "provenance": [
    {
      "source": "ghsa",
      "kind": "document",
      "value": "https://github.com/advisories/GHSA-qqqq-wwww-eeee",
      "decisionReason": null,
      "recordedAt": "2025-03-03T18:00:00+00:00",
      "fieldMask": [
        "advisory"
      ]
    },
    {
      "source": "ghsa",
      "kind": "mapping",
      "value": "GHSA-qqqq-wwww-eeee",
      "decisionReason": null,
      "recordedAt": "2025-03-04T08:30:00+00:00",
      "fieldMask": [
        "advisory"
      ]
    }
  ],
  "published": "2025-02-25T00:00:00+00:00",
  "references": [
    {
      "kind": "advisory",
      "provenance": {
        "source": "ghsa",
        "kind": "reference",
        "value": "https://github.com/advisories/GHSA-qqqq-wwww-eeee",
        "decisionReason": null,
        "recordedAt": "2025-03-04T08:30:00+00:00",
        "fieldMask": [
          "references[]"
        ]
      },
      "sourceTag": null,
      "summary": null,
      "url": "https://github.com/advisories/GHSA-qqqq-wwww-eeee"
    },
    {
      "kind": "fix",
      "provenance": {
        "source": "ghsa",
        "kind": "reference",
        "value": "https://github.com/conflict/package/releases/tag/v1.4.0",
        "decisionReason": null,
        "recordedAt": "2025-03-04T08:30:00+00:00",
        "fieldMask": [
          "references[]"
        ]
      },
      "sourceTag": null,
      "summary": null,
      "url": "https://github.com/conflict/package/releases/tag/v1.4.0"
    }
  ],
  "severity": "high",
  "summary": "Container escape in conflict-package",
  "title": "Container escape in conflict-package"
}