{"action":"Upgrade hummus to 1.0.111 or later.","affected":[{"fixed":"1.0.111","introduced":"0"}],"component":"hummus","cve_ids":["CVE-2022-25892"],"ecosystem":"npm","epss":0.01131,"exploited":false,"fixed_versions":["1.0.111"],"ghsa_id":"GHSA-9cv5-4wqv-9w94","id":"tcs_01M5KFFK66QCSYHE91JKSG4QYG","modified_at":"2023-11-08T04:08:51.018955Z","published_at":"2022-11-01T12:00:30Z","references":["https://osv.dev/vulnerability/GHSA-9cv5-4wqv-9w94","https://github.com/julianhille/MuhammaraJS/security/advisories/GHSA-f64j-4x74-p42m","https://nvd.nist.gov/vuln/detail/CVE-2022-25892","https://github.com/galkahana/HummusJS/issues/463","https://github.com/julianhille/MuhammaraJS/issues/214","https://github.com/galkahana/HummusJS/commit/a9bf2520ab5abb69f9328906e406fbebfb36159a","https://github.com/julianhille/MuhammaraJS/commit/1890fb555eaf171db79b73fdc3ea543bbd63c002","https://github.com/julianhille/MuhammaraJS/commit/90b278d09f16062d93a4160ef0a54d449d739c51","https://github.com/julianhille/MuhammaraJS","https://security.snyk.io/vuln/SNYK-JS-HUMMUS-3091138","https://security.snyk.io/vuln/SNYK-JS-MUHAMMARA-3060320"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9cv5-4wqv-9w94#npm/hummus","url":"https://osv.dev/vulnerability/GHSA-9cv5-4wqv-9w94"}],"summary":"muhammara and hummus vulnerable to denial of service by NULL pointer dereference"}