{"action":"Upgrade remdex/livehelperchat to 3.96 or later.","affected":[{"fixed":"3.96","introduced":"0"}],"component":"remdex/livehelperchat","cve_ids":["CVE-2022-1235"],"ecosystem":"Packagist","epss":0.00556,"exploited":false,"fixed_versions":["3.96"],"ghsa_id":"GHSA-vx8v-g3p3-88vg","id":"tcs_01M5KF9HVMNKXWX3N8JN10ERXB","modified_at":"2023-12-06T01:01:51.464921Z","published_at":"2022-04-06T00:01:31Z","references":["https://osv.dev/vulnerability/GHSA-vx8v-g3p3-88vg","https://nvd.nist.gov/vuln/detail/CVE-2022-1235","https://github.com/livehelperchat/livehelperchat/commit/6538d6df3d8a60fee254170b08dd76a161f7bfdc","https://github.com/livehelperchat/livehelperchat","https://huntr.dev/bounties/92f7b2d4-fa88-4c62-a2ee-721eebe01705"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vx8v-g3p3-88vg","url":"https://osv.dev/vulnerability/GHSA-vx8v-g3p3-88vg"}],"summary":"Weak password hash in LiveHelperChat"}