{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.3.0"}],"component":"fastify-websocket","cve_ids":["CVE-2022-39386"],"ecosystem":"npm","epss":0.00864,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4pcg-wr6c-h9cq","id":"tcs_01M5KF12H64ZK6M9E5GQXQN4Q1","modified_at":"2023-11-08T04:10:20.592717Z","published_at":"2022-11-07T21:13:57Z","references":["https://osv.dev/vulnerability/GHSA-4pcg-wr6c-h9cq","https://github.com/fastify/fastify-websocket/security/advisories/GHSA-4pcg-wr6c-h9cq","https://nvd.nist.gov/vuln/detail/CVE-2022-39386","https://github.com/fastify/fastify-websocket/pull/228","https://github.com/fastify/fastify-websocket/commit/7e8c41a51c101c3d5ce88caee4f71d9c29eb2863","https://github.com/fastify/fastify-websocket/commit/c24adeb3efd57a18b2f287c35d029e88b5a47194","https://github.com/fastify/fastify-websocket","https://github.com/fastify/fastify-websocket/releases/tag/v5.0.1","https://github.com/fastify/fastify-websocket/releases/tag/v7.1.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4pcg-wr6c-h9cq#npm/fastify-websocket","url":"https://osv.dev/vulnerability/GHSA-4pcg-wr6c-h9cq"}],"summary":"fastify/websocket vulnerable to uncaught exception via crash on malformed packet"}