{"action":"Upgrade mercurius to 8.13.2 or later.","affected":[{"fixed":"11.5.0","introduced":"9.0.0"},{"fixed":"8.13.2","introduced":"0"}],"component":"mercurius","cve_ids":["CVE-2023-22477"],"ecosystem":"npm","epss":0.01086,"exploited":false,"fixed_versions":["11.5.0","8.13.2"],"ghsa_id":"GHSA-cm8h-q92v-xcfc","id":"tcs_01M5KFK317Z92VXR2KRZ3WSKCF","modified_at":"2023-11-08T04:11:36.112865Z","published_at":"2023-01-09T21:55:44Z","references":["https://osv.dev/vulnerability/GHSA-cm8h-q92v-xcfc","https://github.com/mercurius-js/mercurius/security/advisories/GHSA-cm8h-q92v-xcfc","https://nvd.nist.gov/vuln/detail/CVE-2023-22477","https://github.com/mercurius-js/mercurius/issues/939","https://github.com/fastify/fastify-websocket/pull/228","https://github.com/mercurius-js/mercurius/pull/940","https://github.com/mercurius-js/mercurius"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-cm8h-q92v-xcfc","url":"https://osv.dev/vulnerability/GHSA-cm8h-q92v-xcfc"}],"summary":"mercurius has Uncaught Exception when using subscriptions"}