{"action":"Upgrade parse-server to 4.10.13 or later.","affected":[{"fixed":"4.10.13","introduced":"0"},{"fixed":"5.2.4","introduced":"5.0.0"}],"component":"parse-server","cve_ids":["CVE-2022-31112"],"ecosystem":"npm","epss":0.01336,"exploited":false,"fixed_versions":["4.10.13","5.2.4"],"ghsa_id":"GHSA-crrq-vr9j-fxxh","id":"tcs_01M5KFKKRTBYEMEJX5AFGKH661","modified_at":"2023-12-06T01:02:18.617929Z","published_at":"2022-07-06T19:52:23Z","references":["https://osv.dev/vulnerability/GHSA-crrq-vr9j-fxxh","https://github.com/parse-community/parse-server/security/advisories/GHSA-crrq-vr9j-fxxh","https://nvd.nist.gov/vuln/detail/CVE-2022-31112","https://github.com/parse-community/parse-server/issues/8073","https://github.com/parse-community/parse-server/pull/8074","https://github.com/parse-community/parse-server/commit/054f3e6ab01d66a0dcfb77725af28eac1485b375","https://github.com/parse-community/parse-server/commit/309f64ced8700321df056fb3cc97f15007a00df1","https://github.com/parse-community/parse-server/commit/9fd4516cde5c742f9f29dd05468b4a43a85639a6","https://github.com/parse-community/parse-server","https://github.com/parse-community/parse-server/releases/tag/5.2.4"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-crrq-vr9j-fxxh","url":"https://osv.dev/vulnerability/GHSA-crrq-vr9j-fxxh"}],"summary":"Protected fields exposed via LiveQuery"}