{"action":"Upgrade azuracast/azuracast to 0.18.3 or later.","affected":[{"fixed":"0.18.3","introduced":"0"}],"component":"azuracast/azuracast","cve_ids":["CVE-2023-2531"],"ecosystem":"Packagist","epss":0.00787,"exploited":false,"fixed_versions":["0.18.3"],"ghsa_id":"GHSA-4m7v-wr6v-2mw5","id":"tcs_01M5KEV44K2Y2Q432FC2WV9BS2","modified_at":"2024-02-16T08:02:33.996728Z","published_at":"2023-05-05T03:30:22Z","references":["https://osv.dev/vulnerability/GHSA-4m7v-wr6v-2mw5","https://nvd.nist.gov/vuln/detail/CVE-2023-2531","https://github.com/azuracast/azuracast/commit/bdb23594ad3e0c47c8568ce028a7c244a406cf9d","https://github.com/azuracast/azuracast","https://huntr.dev/bounties/20463eb2-0f9d-4ea3-a2c8-93f80e7aca02"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4m7v-wr6v-2mw5","url":"https://osv.dev/vulnerability/GHSA-4m7v-wr6v-2mw5"}],"summary":"AzuraCast missing brute force prevention"}