{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.6.6"}],"component":"@devicefarmer/stf","cve_ids":["CVE-2023-51839"],"ecosystem":"npm","epss":0.00376,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7xm8-wjq7-88r5","id":"tcs_01M5KFB82R2APY16SH2DDYNJ8J","modified_at":"2024-02-06T20:41:54.863923Z","published_at":"2024-01-29T21:30:27Z","references":["https://osv.dev/vulnerability/GHSA-7xm8-wjq7-88r5","https://nvd.nist.gov/vuln/detail/CVE-2023-51839","https://github.com/DeviceFarmer/stf/issues/736","https://github.com/DeviceFarmer/stf","https://github.com/DeviceFarmer/stf/blob/a6b5f18941d0de5929f9c24c3ce3e9c13317a653/lib/util/vncauth.js#L35","https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51839.md"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-7xm8-wjq7-88r5","url":"https://osv.dev/vulnerability/GHSA-7xm8-wjq7-88r5"}],"summary":"DeviceFarmer stf uses DES-ECB"}