{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.9.0"}],"component":"audify","cve_ids":["CVE-2024-21522"],"ecosystem":"npm","epss":0.00616,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7vhm-fmph-7wxw","id":"tcs_01M5KFAZ7938HJ7P2EH177PVTD","modified_at":"2024-07-10T21:12:45.467955Z","published_at":"2024-07-10T06:33:51Z","references":["https://osv.dev/vulnerability/GHSA-7vhm-fmph-7wxw","https://nvd.nist.gov/vuln/detail/CVE-2024-21522","https://gist.github.com/dellalibera/6bb866ae5d1cc2adaabe27bbd6d2d21e","https://github.com/almoghamdani/audify","https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp#L53","https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L79","https://security.snyk.io/vuln/SNYK-JS-AUDIFY-6370700"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7vhm-fmph-7wxw","url":"https://osv.dev/vulnerability/GHSA-7vhm-fmph-7wxw"}],"summary":"audify vulnerable to Improper Validation of Array Index"}