{"action":"Upgrade fastify to 3.29.4 or later.","affected":[{"fixed":"4.10.2","introduced":"4.0.0"},{"fixed":"3.29.4","introduced":"3.0.0"}],"component":"fastify","cve_ids":["CVE-2022-41919"],"ecosystem":"npm","epss":0.00401,"exploited":false,"fixed_versions":["4.10.2","3.29.4"],"ghsa_id":"GHSA-3fjj-p79j-c9hh","id":"tcs_01M5KEX5KMPG6Q5NXYNPHTXRY7","modified_at":"2023-11-08T04:10:35.631515Z","published_at":"2022-11-21T22:28:11Z","references":["https://osv.dev/vulnerability/GHSA-3fjj-p79j-c9hh","https://github.com/fastify/fastify/security/advisories/GHSA-3fjj-p79j-c9hh","https://nvd.nist.gov/vuln/detail/CVE-2022-41919","https://github.com/fastify/fastify/commit/62dde76f1f7aca76e38625fe8d983761f26e6fc9","https://github.com/fastify/fastify","https://www.npmjs.com/package/@fastify/csrf"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-3fjj-p79j-c9hh","url":"https://osv.dev/vulnerability/GHSA-3fjj-p79j-c9hh"}],"summary":"Fastify: Incorrect Content-Type parsing can lead to CSRF attack"}