{"action":"Upgrade mpl-candy-machine to 4.5.1 or later.","affected":[{"fixed":"4.5.1","introduced":"4.5.0"}],"component":"mpl-candy-machine","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["4.5.1"],"ghsa_id":"GHSA-9v25-r5q2-2p6w","id":"tcs_01M5KEWK9WPHPTZ0K5FPKKMCJX","modified_at":"2022-12-12T22:03:19Z","published_at":"2022-12-12T22:03:19Z","references":["https://osv.dev/vulnerability/GHSA-9v25-r5q2-2p6w","https://github.com/metaplex-foundation/metaplex-program-library/security/advisories/GHSA-9v25-r5q2-2p6w","https://github.com/metaplex-foundation/metaplex-program-library/commit/e6b3aff603ac06236bf77c2ec21ead93c6836dce","https://github.com/metaplex-foundation/metaplex-program-library"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-9v25-r5q2-2p6w","url":"https://osv.dev/vulnerability/GHSA-9v25-r5q2-2p6w"}],"summary":"Candy Machine Set Collection During Mint Missing Check"}