{"ghsa": "GHSA-86vw-mfpg-wwv9", "repo": "jsonata-js/jsonata", "cwes": ["CWE-1333"], "summary": "fix $toMillis() with more than 3 digit fractional seconds (#782)", "fix_commit": "80ba95d170f74e3f20f4f36b8b77d8c85cea7686", "parent_commit": "1c9665056e4217d46b44c859fe128c96d5c5bc3f", "vuln_files": ["src/datetime.js"], "vuln_lines": {"src/datetime.js": [996]}, "source_files": 6, "scope_dirs": ["src"], "source_note": "Subset: only the src/ package (containing the vuln file) was copied into source/, not the full repo."}