{"action":"Upgrade notrinos/notrinos-erp to 0.7 or later.","affected":[{"fixed":"0.7","introduced":"0"}],"component":"notrinos/notrinos-erp","cve_ids":["CVE-2022-2927"],"ecosystem":"Packagist","epss":0.00931,"exploited":false,"fixed_versions":["0.7"],"ghsa_id":"GHSA-qhm8-69qh-g76j","id":"tcs_01M5KF7BD4TJVZMZFZZNBSNRGC","modified_at":"2023-11-08T04:09:12.904975Z","published_at":"2022-08-23T00:00:19Z","references":["https://osv.dev/vulnerability/GHSA-qhm8-69qh-g76j","https://nvd.nist.gov/vuln/detail/CVE-2022-2927","https://github.com/notrinos/notrinoserp/commit/e61e76b44c6a2b28a4a648a06ef34f65c376ec1e","https://github.com/notrinos/notrinoserp","https://huntr.dev/bounties/7fa956dd-f541-4dcd-987d-ba15caa6a886"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-qhm8-69qh-g76j","url":"https://osv.dev/vulnerability/GHSA-qhm8-69qh-g76j"}],"summary":"Missing password strength check in notrinos/notrinos-erp"}