{"action":"Upgrade @asyncapi/modelina to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"@asyncapi/modelina","cve_ids":["CVE-2023-23619"],"ecosystem":"npm","epss":0.01064,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-4jg2-84c2-pj95","id":"tcs_01M5KF0RETMGZ9NMJ2QBETY9FF","modified_at":"2026-09-10T03:49:27.247012150Z","published_at":"2021-09-21T18:41:59Z","references":["https://osv.dev/vulnerability/GHSA-4jg2-84c2-pj95","https://github.com/asyncapi/modelina/security/advisories/GHSA-4jg2-84c2-pj95","https://nvd.nist.gov/vuln/detail/CVE-2023-23619","https://github.com/asyncapi/modelina"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-4jg2-84c2-pj95","url":"https://osv.dev/vulnerability/GHSA-4jg2-84c2-pj95"}],"summary":"Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina"}