{"action":"Upgrade nilsteampassnet/teampass to 3.0.10 or later.","affected":[{"fixed":"3.0.10","introduced":"0"}],"component":"nilsteampassnet/teampass","cve_ids":["CVE-2023-3551"],"ecosystem":"Packagist","epss":0.01137,"exploited":false,"fixed_versions":["3.0.10"],"ghsa_id":"GHSA-97hm-2mfr-2p97","id":"tcs_01M5KEZSS5H4CJPFDES5N22SVP","modified_at":"2024-02-16T08:22:45.555687Z","published_at":"2023-07-08T09:30:24Z","references":["https://osv.dev/vulnerability/GHSA-97hm-2mfr-2p97","https://nvd.nist.gov/vuln/detail/CVE-2023-3551","https://github.com/nilsteampassnet/teampass/commit/cc6abc76aa46ed4a27736c1d2f21e432a5d54e6f","https://github.com/nilsteampassnet/teampass","https://huntr.dev/bounties/cf8878ff-6cd9-49be-b313-7ac2a94fc7f7"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-97hm-2mfr-2p97","url":"https://osv.dev/vulnerability/GHSA-97hm-2mfr-2p97"}],"summary":"TeamPass Code Injection vulnerability"}