{"action":"Upgrade buttercup to 7.4.0 or later.","affected":[{"fixed":"7.4.0","introduced":"2.20.3"}],"component":"buttercup","cve_ids":["CVE-2023-41646"],"ecosystem":"npm","epss":0.00475,"exploited":false,"fixed_versions":["7.4.0"],"ghsa_id":"GHSA-7cwq-p8cr-h9qg","id":"tcs_01M5KF9P9Z2PVH2CW9A1460DJC","modified_at":"2023-12-13T23:41:32.810619Z","published_at":"2023-09-08T00:31:02Z","references":["https://osv.dev/vulnerability/GHSA-7cwq-p8cr-h9qg","https://nvd.nist.gov/vuln/detail/CVE-2023-41646","https://github.com/buttercup/buttercup-core/issues/336","https://github.com/buttercup/buttercup-core/commit/77fbcdfe4caf57486a3c83c07fc6d36bb0e1d3e1","https://buttercup.pw","https://github.com/buttercup/buttercup-core","https://github.com/tristao-marinho/CVE-2023-41646"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-7cwq-p8cr-h9qg","url":"https://osv.dev/vulnerability/GHSA-7cwq-p8cr-h9qg"}],"summary":"Buttercup allows attackers to obtain the hash of the master password"}