{"action":"Upgrade node-saml to 4.0.0-beta.5 or later.","affected":[{"fixed":"4.0.0-beta.5","introduced":"0"}],"component":"node-saml","cve_ids":["CVE-2022-39300"],"ecosystem":"npm","epss":0.00782,"exploited":false,"fixed_versions":["4.0.0-beta.5"],"ghsa_id":"GHSA-5p8w-2mvw-38pv","id":"tcs_01M5KF49XD8XW62J40EFDYVE5B","modified_at":"2023-11-08T04:10:18.269789Z","published_at":"2022-10-12T22:05:44Z","references":["https://osv.dev/vulnerability/GHSA-5p8w-2mvw-38pv","https://github.com/node-saml/node-saml/security/advisories/GHSA-5p8w-2mvw-38pv","https://nvd.nist.gov/vuln/detail/CVE-2022-39300","https://github.com/node-saml/node-saml/commit/c1f275c289c01921e58f5c70ce0fdbc5287e5fbe","https://github.com/node-saml/node-saml"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-5p8w-2mvw-38pv","url":"https://osv.dev/vulnerability/GHSA-5p8w-2mvw-38pv"}],"summary":"Signature bypass via multiple root elements"}