{"action":"Upgrade tabby-ssh to 1.0.214 or later.","affected":[{"fixed":"1.0.214","introduced":"0"}],"component":"tabby-ssh","cve_ids":["CVE-2024-48460"],"ecosystem":"npm","epss":0.00368,"exploited":false,"fixed_versions":["1.0.214"],"ghsa_id":"GHSA-8vq4-8hfp-29xh","id":"tcs_01M5KFE2FFY43MJMM43HMVQB91","modified_at":"2025-01-17T16:44:14.842031Z","published_at":"2025-01-17T00:30:48Z","references":["https://osv.dev/vulnerability/GHSA-8vq4-8hfp-29xh","https://nvd.nist.gov/vuln/detail/CVE-2024-48460","https://github.com/Eugeny/tabby/issues/9955","https://github.com/Eugeny/tabby/commit/1c077147acd0a6ec9f8ee80d83a3e9688fbb9444","https://github.com/Eugeny/tabby"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-8vq4-8hfp-29xh","url":"https://osv.dev/vulnerability/GHSA-8vq4-8hfp-29xh"},{"source":"nvd","source_id":"CVE-2024-48460","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48460"}],"summary":"Eugeny Tabby Sends Password Despite Host Key Verification Failure"}