{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.3.1"}],"component":"@keystone-6/core","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5fp6-4xw3-xqq3","id":"tcs_01M5KF3JBHRM3W0AEFC6K1R0G1","modified_at":"2023-06-23T13:56:28Z","published_at":"2023-06-12T18:37:31Z","references":["https://osv.dev/vulnerability/GHSA-5fp6-4xw3-xqq3","https://github.com/keystonejs/keystone/security/advisories/GHSA-5fp6-4xw3-xqq3","https://github.com/keystonejs/keystone/issues/8282#issuecomment-1586019823","https://github.com/keystonejs/keystone","https://github.com/paralleldrive/cuid#status-deprecated-due-to-security-use-cuid2-instead"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-5fp6-4xw3-xqq3","url":"https://osv.dev/vulnerability/GHSA-5fp6-4xw3-xqq3"}],"summary":"@keystone-6/core's bundled cuid package known to be insecure"}