{"action":"Upgrade @openzeppelin/contracts to 4.8.3 or later.","affected":[{"fixed":"4.8.3","introduced":"4.3.0"}],"component":"@openzeppelin/contracts","cve_ids":["CVE-2023-30542"],"ecosystem":"npm","epss":0.00584,"exploited":false,"fixed_versions":["4.8.3"],"ghsa_id":"GHSA-93hq-5wgc-jc82","id":"tcs_01M5KFEKF2KB2E0JH3YRVG16MB","modified_at":"2023-11-08T04:12:24.945774Z","published_at":"2023-04-20T14:11:03Z","references":["https://osv.dev/vulnerability/GHSA-93hq-5wgc-jc82","https://github.com/OpenZeppelin/openzeppelin-contracts/security/advisories/GHSA-93hq-5wgc-jc82","https://nvd.nist.gov/vuln/detail/CVE-2023-30542","https://github.com/OpenZeppelin/openzeppelin-contracts/commit/8d633cb7d169f2f8595b273660b00b69e845c2fe","https://github.com/OpenZeppelin/openzeppelin-contracts","https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v4.8.3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-93hq-5wgc-jc82","url":"https://osv.dev/vulnerability/GHSA-93hq-5wgc-jc82"}],"summary":"GovernorCompatibilityBravo may trim proposal calldata"}