{"action":"Upgrade @evershop/evershop to 1.0.0-rc.8 or later.","affected":[{"fixed":"1.0.0-rc.8","introduced":"0"}],"component":"@evershop/evershop","cve_ids":["CVE-2023-46498"],"ecosystem":"npm","epss":0.01285,"exploited":false,"fixed_versions":["1.0.0-rc.8"],"ghsa_id":"GHSA-5mmr-9qx3-3pf9","id":"tcs_01M5KF46MN76SHV897ZNNP8WZJ","modified_at":"2023-12-13T14:13:15.955514Z","published_at":"2023-12-08T21:30:30Z","references":["https://osv.dev/vulnerability/GHSA-5mmr-9qx3-3pf9","https://nvd.nist.gov/vuln/detail/CVE-2023-46498","https://github.com/evershopcommerce/evershop/pull/342","https://devhub.checkmarx.com/cve-details/Cx8b24ace3-0c9a","https://devhub.checkmarx.com/cve-details/cve-2023-46498","https://github.com/evershopcommerce/evershop"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5mmr-9qx3-3pf9","url":"https://osv.dev/vulnerability/GHSA-5mmr-9qx3-3pf9"}],"summary":"Code execution in evershop"}