{"action":"Upgrade @cubejs-backend/api-gateway to 0.31.24 or later.","affected":[{"fixed":"0.31.24","introduced":"0.31.23"}],"component":"@cubejs-backend/api-gateway","cve_ids":["CVE-2022-23510"],"ecosystem":"npm","epss":0.00974,"exploited":false,"fixed_versions":["0.31.24"],"ghsa_id":"GHSA-6jqm-3c9g-pch7","id":"tcs_01M5KF7BYQQ0Z13M62H812NZ0J","modified_at":"2023-11-08T04:08:20.061879Z","published_at":"2022-12-12T21:28:35Z","references":["https://osv.dev/vulnerability/GHSA-6jqm-3c9g-pch7","https://github.com/cube-js/cube.js/security/advisories/GHSA-6jqm-3c9g-pch7","https://nvd.nist.gov/vuln/detail/CVE-2022-23510","https://github.com/cube-js/cube.js/commit/3c614674fed6ca17df08bbba8c835ef110167570","https://github.com/cube-js/cube.js/commit/f1140de508e359970ac82b50bae1c4bf152f6041","https://github.com/cube-js/cube.js"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-6jqm-3c9g-pch7","url":"https://osv.dev/vulnerability/GHSA-6jqm-3c9g-pch7"}],"summary":"@cubejs-backend/api-gateway row level security bypass"}