{"action":"Upgrade erxes to 1.6.1 or later.","affected":[{"fixed":"1.6.1","introduced":"0"}],"component":"erxes","cve_ids":["CVE-2024-57190"],"ecosystem":"npm","epss":0.00626,"exploited":false,"fixed_versions":["1.6.1"],"ghsa_id":"GHSA-7rhv-xm4q-wh42","id":"tcs_01M5KFAVKAXFPZJAP3APQ8D91D","modified_at":"2025-06-10T21:12:11.209082Z","published_at":"2025-06-10T18:32:27Z","references":["https://osv.dev/vulnerability/GHSA-7rhv-xm4q-wh42","https://nvd.nist.gov/vuln/detail/CVE-2024-57190","https://github.com/erxes/erxes/commit/4ed2ca797241d2ba0c9083feeadd9755c1310ce8","https://github.com/erxes/erxes","https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7rhv-xm4q-wh42","url":"https://osv.dev/vulnerability/GHSA-7rhv-xm4q-wh42"},{"source":"nvd","source_id":"CVE-2024-57190","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57190"}],"summary":"Erxes Incorrect Access Control vulnerability"}