{"action":"Upgrade @google-cloud/firestore to 6.1.0 or later.","affected":[{"fixed":"6.1.0","introduced":"0"}],"component":"@google-cloud/firestore","cve_ids":["CVE-2023-6460"],"ecosystem":"npm","epss":0.00122,"exploited":false,"fixed_versions":["6.1.0"],"ghsa_id":"GHSA-4g6q-77j7-vvjc","id":"tcs_01M5KF0AKM0XCP1CWVH8G7Z1TS","modified_at":"2026-05-08T20:49:06.546400Z","published_at":"2023-12-04T15:31:55Z","references":["https://osv.dev/vulnerability/GHSA-4g6q-77j7-vvjc","https://nvd.nist.gov/vuln/detail/CVE-2023-6460","https://github.com/googleapis/nodejs-firestore/pull/1742","https://bughunters.google.com/reports/vrp/KNvgo1Wij","https://github.com/googleapis/nodejs-firestore","https://github.com/googleapis/nodejs-firestore/releases/tag/v6.1.0"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-4g6q-77j7-vvjc","url":"https://osv.dev/vulnerability/GHSA-4g6q-77j7-vvjc"}],"summary":"Logging of the firestore key within nodejs-firestore"}