{"action":"Upgrade strapi to 3.2.5 or later.","affected":[{"fixed":"3.2.5","introduced":"0"}],"component":"strapi","cve_ids":["CVE-2020-27664"],"ecosystem":"npm","epss":0.02292,"exploited":false,"fixed_versions":["3.2.5"],"ghsa_id":"GHSA-7frv-9phw-vrvr","id":"tcs_01M5KF9VRYHK2S9K1E99HJARAZ","modified_at":"2023-11-08T04:03:21.991807Z","published_at":"2021-05-10T18:43:59Z","references":["https://osv.dev/vulnerability/GHSA-7frv-9phw-vrvr","https://nvd.nist.gov/vuln/detail/CVE-2020-27664","https://github.com/strapi/strapi/pull/8442","https://github.com/strapi/strapi/releases/tag/v3.2.5"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7frv-9phw-vrvr","url":"https://osv.dev/vulnerability/GHSA-7frv-9phw-vrvr"}],"summary":"Authorization bypass in Strapi"}