{"action":"Upgrade @keystone-6/core to 5.5.1 or later.","affected":[{"fixed":"5.5.1","introduced":"0"}],"component":"@keystone-6/core","cve_ids":["CVE-2023-40027"],"ecosystem":"npm","epss":0.00579,"exploited":false,"fixed_versions":["5.5.1"],"ghsa_id":"GHSA-9cvc-v7wm-992c","id":"tcs_01M5KFFKGX0NHSZR3WJXPJ8SPS","modified_at":"2023-11-08T04:13:16.719014Z","published_at":"2023-08-15T20:04:14Z","references":["https://osv.dev/vulnerability/GHSA-9cvc-v7wm-992c","https://github.com/keystonejs/keystone/security/advisories/GHSA-9cvc-v7wm-992c","https://nvd.nist.gov/vuln/detail/CVE-2023-40027","https://github.com/keystonejs/keystone/pull/8771","https://github.com/keystonejs/keystone/commit/650e27e6e9b42abfb94c340c8470faf61f0ff284","https://github.com/keystonejs/keystone","https://github.com/keystonejs/keystone/releases/tag/2023-08-15"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9cvc-v7wm-992c","url":"https://osv.dev/vulnerability/GHSA-9cvc-v7wm-992c"}],"summary":"When `ui.isAccessAllowed` is `undefined`, the `adminMeta` GraphQL query is publicly accessible"}