{"action":"Upgrade @budibase/server to 2.20.0 or later.","affected":[{"fixed":"2.20.0","introduced":"0"}],"component":"@budibase/server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.20.0"],"ghsa_id":"GHSA-4g2x-vq5p-5vj6","id":"tcs_01M5KF08THQN43B9ZV84XMQM9M","modified_at":"2024-08-15T17:02:27Z","published_at":"2024-03-01T20:09:00Z","references":["https://osv.dev/vulnerability/GHSA-4g2x-vq5p-5vj6","https://github.com/Budibase/budibase/security/advisories/GHSA-4g2x-vq5p-5vj6","https://github.com/patriksimek/vm2/security/advisories/GHSA-cchq-frgv-rjh5","https://github.com/Budibase/budibase/commit/601c02a4acc695b1cc602bf611f0ae66d6e5868f","https://github.com/Budibase/budibase"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4g2x-vq5p-5vj6","url":"https://osv.dev/vulnerability/GHSA-4g2x-vq5p-5vj6"}],"summary":"Budibase affected by VM2 Constructor Escape Vulnerability"}