{"action":"Upgrade svix to 1.17.0 or later.","affected":[{"fixed":"1.17.0","introduced":"0"}],"component":"svix","cve_ids":["CVE-2024-21491"],"ecosystem":"crates.io","epss":0.0041,"exploited":false,"fixed_versions":["1.17.0"],"ghsa_id":"GHSA-747x-5m58-mq97","id":"tcs_01M5KETZ4K3M85S03RZ5C06802","modified_at":"2024-10-16T17:06:15Z","published_at":"2024-02-13T06:30:28Z","references":["https://osv.dev/vulnerability/GHSA-747x-5m58-mq97","https://nvd.nist.gov/vuln/detail/CVE-2024-21491","https://github.com/svix/svix-webhooks/pull/1190","https://github.com/svix/svix-webhooks/commit/958821bd3b956d1436af65f70a0964d4ffb7daf6","https://github.com/svix/svix-webhooks","https://rustsec.org/advisories/RUSTSEC-2024-0010.html","https://security.snyk.io/vuln/SNYK-RUST-SVIX-6230729"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-747x-5m58-mq97","url":"https://osv.dev/vulnerability/GHSA-747x-5m58-mq97"}],"summary":"svix vulnerable to Authentication Bypass"}