{"action":"Upgrade otp-generator to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"otp-generator","cve_ids":["CVE-2021-23451"],"ecosystem":"npm","epss":0.00909,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-6x93-h9g3-9phr","id":"tcs_01M5KF87KAVWX5ZRR7CS7HN0EP","modified_at":"2023-11-08T04:05:10.457984Z","published_at":"2022-07-26T00:01:05Z","references":["https://osv.dev/vulnerability/GHSA-6x93-h9g3-9phr","https://nvd.nist.gov/vuln/detail/CVE-2021-23451","https://github.com/Maheshkumar-Kakade/otp-generator/issues/12","https://github.com/Maheshkumar-Kakade/otp-generator/commit/b27de1ce439ae7f533cec26677e9698671275b70","https://github.com/Maheshkumar-Kakade/otp-generator","https://security.snyk.io/vuln/SNYK-JS-OTPGENERATOR-1655480"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6x93-h9g3-9phr","url":"https://osv.dev/vulnerability/GHSA-6x93-h9g3-9phr"}],"summary":"otp-generator before v3.0.0 insecurely generates random one-time passwords"}