{"action":"Upgrade @kindspells/astro-shield to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"1.2.0"}],"component":"@kindspells/astro-shield","cve_ids":["CVE-2024-30250"],"ecosystem":"npm","epss":0.0031,"exploited":false,"fixed_versions":["1.3.2"],"ghsa_id":"GHSA-c4gr-q97g-ppwc","id":"tcs_01M5KFHQ9B9T5GPB1T438NADZC","modified_at":"2026-09-10T03:50:11.207762646Z","published_at":"2024-04-01T20:33:53Z","references":["https://osv.dev/vulnerability/GHSA-c4gr-q97g-ppwc","https://github.com/kindspells/astro-shield/security/advisories/GHSA-c4gr-q97g-ppwc","https://nvd.nist.gov/vuln/detail/CVE-2024-30250","https://github.com/kindspells/astro-shield/commit/1221019306f501bf5fa9bcfb5a23a2321d34ba0a","https://github.com/kindspells/astro-shield/commit/5ae8b8ef4f681d3a81431ee7e79d5dec545c6e1f","https://github.com/kindspells/astro-shield","https://github.com/kindspells/astro-shield/releases/tag/1.3.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c4gr-q97g-ppwc","url":"https://osv.dev/vulnerability/GHSA-c4gr-q97g-ppwc"}],"summary":"In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists"}