{"action":"Upgrade muhammara to 2.6.1 or later.","affected":[{"fixed":"2.6.1","introduced":"0"},{"fixed":"3.1.1","introduced":"3.0.0"}],"component":"muhammara","cve_ids":["CVE-2022-25892"],"ecosystem":"npm","epss":0.01131,"exploited":false,"fixed_versions":["2.6.1","3.1.1"],"ghsa_id":"GHSA-9cv5-4wqv-9w94","id":"tcs_01M5KFFK03RV6SV16YFN0VYF86","modified_at":"2023-11-08T04:08:51.018955Z","published_at":"2022-11-01T12:00:30Z","references":["https://osv.dev/vulnerability/GHSA-9cv5-4wqv-9w94","https://github.com/julianhille/MuhammaraJS/security/advisories/GHSA-f64j-4x74-p42m","https://nvd.nist.gov/vuln/detail/CVE-2022-25892","https://github.com/galkahana/HummusJS/issues/463","https://github.com/julianhille/MuhammaraJS/issues/214","https://github.com/galkahana/HummusJS/commit/a9bf2520ab5abb69f9328906e406fbebfb36159a","https://github.com/julianhille/MuhammaraJS/commit/1890fb555eaf171db79b73fdc3ea543bbd63c002","https://github.com/julianhille/MuhammaraJS/commit/90b278d09f16062d93a4160ef0a54d449d739c51","https://github.com/julianhille/MuhammaraJS","https://security.snyk.io/vuln/SNYK-JS-HUMMUS-3091138","https://security.snyk.io/vuln/SNYK-JS-MUHAMMARA-3060320"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9cv5-4wqv-9w94","url":"https://osv.dev/vulnerability/GHSA-9cv5-4wqv-9w94"}],"summary":"muhammara and hummus vulnerable to denial of service by NULL pointer dereference"}