{"action":"Upgrade log4js to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"log4js","cve_ids":["CVE-2022-21704"],"ecosystem":"npm","epss":0.00297,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-82v2-mx6x-wq7q","id":"tcs_01M5KFBEZF936RM5YJXRA07F1T","modified_at":"2023-11-08T04:08:08.863264Z","published_at":"2022-01-21T18:53:27Z","references":["https://osv.dev/vulnerability/GHSA-82v2-mx6x-wq7q","https://github.com/log4js-node/log4js-node/security/advisories/GHSA-82v2-mx6x-wq7q","https://nvd.nist.gov/vuln/detail/CVE-2022-21704","https://github.com/log4js-node/log4js-node/pull/1141/commits/8042252861a1b65adb66931fdf702ead34fa9b76","https://github.com/log4js-node/streamroller/pull/87","https://github.com/log4js-node/log4js-node","https://github.com/log4js-node/log4js-node/blob/v6.4.0/CHANGELOG.md#640","https://lists.debian.org/debian-lts-announce/2022/12/msg00014.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-82v2-mx6x-wq7q","url":"https://osv.dev/vulnerability/GHSA-82v2-mx6x-wq7q"}],"summary":"Incorrect Default Permissions in log4js"}