CVE-2022-39230
1 advisory.
npm/fhir-works-on-aws-authz-smart CVE-2022-39230: medium 6.5, EPSS 0.74%
fhir-works-on-aws-authz-smart handles permissions improperly
Action: Upgrade fhir-works-on-aws-authz-smart to 3.1.3 or later.
npm i fhir-works-on-aws-authz-smart@3.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1.1 | 3.1.3 | - |
Fixed versions
| 3.1.3 |
Sources
- osv: GHSA-vv7x-7w4m-q72f
- https://github.com/awslabs/fhir-works-on-aws-authz-smart/security/advisories/GHSA-vv7x-7w4m-q72f
- https://nvd.nist.gov/vuln/detail/CVE-2022-39230
- https://github.com/awslabs/fhir-works-on-aws-authz-smart/commit/203bbc0dd17de748c36b33c68b866ed2dfd613d3
- https://github.com/awslabs/fhir-works-on-aws-authz-smart
CVE-2022-39230 · published · modified · JSON