{"action":"Upgrade notrinos/notrinos-erp to 0.7 or later.","affected":[{"fixed":"0.7","introduced":"0"}],"component":"notrinos/notrinos-erp","cve_ids":["CVE-2022-2921"],"ecosystem":"Packagist","epss":0.01359,"exploited":false,"fixed_versions":["0.7"],"ghsa_id":"GHSA-44w5-q257-8428","id":"tcs_01M5KETKH0QN5XMWYV9Y2M5GVY","modified_at":"2023-11-08T04:09:10.574701Z","published_at":"2022-08-22T00:00:52Z","references":["https://osv.dev/vulnerability/GHSA-44w5-q257-8428","https://nvd.nist.gov/vuln/detail/CVE-2022-2921","https://github.com/notrinos/notrinoserp/commit/1b9903f4deea3289872793e60d730c63ecbf7b45","https://github.com/notrinos/NotrinosERP","https://huntr.dev/bounties/51b32a1c-946b-4390-a212-b6c4b6e4115c"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-44w5-q257-8428","url":"https://osv.dev/vulnerability/GHSA-44w5-q257-8428"}],"summary":"Exposure of password hashes in notrinos/notrinos-erp"}