{"action":"Upgrade nilsteampassnet/teampass to 3.0.7 or later.","affected":[{"fixed":"3.0.7","introduced":"0"}],"component":"nilsteampassnet/teampass","cve_ids":["CVE-2023-2591"],"ecosystem":"Packagist","epss":0.00607,"exploited":false,"fixed_versions":["3.0.7"],"ghsa_id":"GHSA-prj5-2g2p-x2mw","id":"tcs_01M5KF6N9HDCVJ8QQCJ3E8MHXR","modified_at":"2024-02-16T08:06:56.846182Z","published_at":"2023-05-09T12:30:22Z","references":["https://osv.dev/vulnerability/GHSA-prj5-2g2p-x2mw","https://nvd.nist.gov/vuln/detail/CVE-2023-2591","https://github.com/nilsteampassnet/teampass/commit/57a977c6323656e5dc06ab5c227e75c3465a1a4a","https://github.com/nilsteampassnet/TeamPass","https://huntr.dev/bounties/705f79f4-f5e3-41d7-82a5-f00441cd984b"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-prj5-2g2p-x2mw","url":"https://osv.dev/vulnerability/GHSA-prj5-2g2p-x2mw"}],"summary":"teampass vulnerable to code injection"}