{"action":"Upgrade @evershop/evershop to 1.0.0-rc.9 or later.","affected":[{"fixed":"1.0.0-rc.9","introduced":"0"}],"component":"@evershop/evershop","cve_ids":["CVE-2023-46943"],"ecosystem":"npm","epss":0.00498,"exploited":false,"fixed_versions":["1.0.0-rc.9"],"ghsa_id":"GHSA-32r3-57hp-cgfw","id":"tcs_01M5KEVP73GP7Y2QZSTXWQCVK4","modified_at":"2024-11-18T16:26:35Z","published_at":"2024-01-13T03:30:17Z","references":["https://osv.dev/vulnerability/GHSA-32r3-57hp-cgfw","https://nvd.nist.gov/vuln/detail/CVE-2023-46943","https://github.com/evershopcommerce/evershop/commit/96d9ca3e024e0b63c538911e4a914df3d287cc9f","https://advisory.checkmarx.net/advisory/CVE-2023-46943","https://devhub.checkmarx.com/cve-details/CVE-2023-46943","https://github.com/evershopcommerce/evershop"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-32r3-57hp-cgfw","url":"https://osv.dev/vulnerability/GHSA-32r3-57hp-cgfw"}],"summary":"EverShop at risk to unauthorized access via weak HMAC secret"}