{"action":"Upgrade @fastify/websocket to 5.0.1 or later.","affected":[{"fixed":"5.0.1","introduced":"5.0.0"},{"fixed":"7.1.1","introduced":"6.0.0"}],"component":"@fastify/websocket","cve_ids":["CVE-2022-39386"],"ecosystem":"npm","epss":0.00795,"exploited":false,"fixed_versions":["5.0.1","7.1.1"],"ghsa_id":"GHSA-4pcg-wr6c-h9cq","id":"tcs_01M5KF12A1R4CMF7G7GZBJTHQJ","modified_at":"2023-11-08T04:10:20.592717Z","published_at":"2022-11-07T21:13:57Z","references":["https://osv.dev/vulnerability/GHSA-4pcg-wr6c-h9cq","https://github.com/fastify/fastify-websocket/security/advisories/GHSA-4pcg-wr6c-h9cq","https://nvd.nist.gov/vuln/detail/CVE-2022-39386","https://github.com/fastify/fastify-websocket/pull/228","https://github.com/fastify/fastify-websocket/commit/7e8c41a51c101c3d5ce88caee4f71d9c29eb2863","https://github.com/fastify/fastify-websocket/commit/c24adeb3efd57a18b2f287c35d029e88b5a47194","https://github.com/fastify/fastify-websocket","https://github.com/fastify/fastify-websocket/releases/tag/v5.0.1","https://github.com/fastify/fastify-websocket/releases/tag/v7.1.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4pcg-wr6c-h9cq","url":"https://osv.dev/vulnerability/GHSA-4pcg-wr6c-h9cq"}],"summary":"fastify/websocket vulnerable to uncaught exception via crash on malformed packet"}