{"action":"Upgrade mpl-token-metadata to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"1.5.0"}],"component":"mpl-token-metadata","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.6.3"],"ghsa_id":"GHSA-8r76-fr72-j32w","id":"tcs_01M5KEVYNDMECSQJ1KT12JKQVG","modified_at":"2022-12-12T22:02:42Z","published_at":"2022-12-12T22:02:42Z","references":["https://osv.dev/vulnerability/GHSA-8r76-fr72-j32w","https://github.com/metaplex-foundation/metaplex-program-library/security/advisories/GHSA-8r76-fr72-j32w","https://github.com/metaplex-foundation/metaplex-program-library/commit/c18591a7ce9bb561940cb94df4b7c35ef9cc0f57","https://github.com/metaplex-foundation/metaplex-program-library","https://twitter.com/thehasheddude/status/1601642138143375360"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-8r76-fr72-j32w#crates.io/mpl-token-metadata","url":"https://osv.dev/vulnerability/GHSA-8r76-fr72-j32w"}],"summary":"Creator Verification Error when Bubblegum Activate"}