{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.3.9"}],"component":"cockpit-hq/cockpit","cve_ids":["CVE-2023-1160"],"ecosystem":"Packagist","epss":0.00349,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-p8cq-pv6w-6rwx","id":"tcs_01M5KF66SQYP0TQ5DP1N40Y3Q0","modified_at":"2023-11-08T04:11:14.461756Z","published_at":"2023-03-03T03:30:24Z","references":["https://osv.dev/vulnerability/GHSA-p8cq-pv6w-6rwx","https://nvd.nist.gov/vuln/detail/CVE-2023-1160","https://github.com/cockpit-hq/cockpit/commit/690016208850f2d788ebc3c67884d4c692587eb8","https://github.com/cockpit-hq/cockpit","https://huntr.dev/bounties/3ce480dc-1b1c-4230-9287-0dc3b31c2f87"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-p8cq-pv6w-6rwx","url":"https://osv.dev/vulnerability/GHSA-p8cq-pv6w-6rwx"}],"summary":"Cockpit Uses Platform-Dependent Third Party Components"}