{"action":"Upgrade passport-oauth2 to 1.6.1 or later.","affected":[{"fixed":"1.6.1","introduced":"0"}],"component":"passport-oauth2","cve_ids":["CVE-2021-41580"],"ecosystem":"npm","epss":0.01303,"exploited":false,"fixed_versions":["1.6.1"],"ghsa_id":"GHSA-f794-r6xc-hf3v","id":"tcs_01M5KFMT5ZRR8QQNTVR4V6SE28","modified_at":"2023-11-08T04:06:59.967430Z","published_at":"2021-09-29T17:18:32Z","references":["https://osv.dev/vulnerability/GHSA-f794-r6xc-hf3v","https://nvd.nist.gov/vuln/detail/CVE-2021-41580","https://github.com/jaredhanson/passport-oauth2/pull/144","https://github.com/jaredhanson/passport-oauth2/commit/8e3bcdff145a2219033bd782fc517229fe3e05ea","https://github.com/jaredhanson/passport-oauth2","https://github.com/jaredhanson/passport-oauth2/compare/v1.6.0...v1.6.1","https://medium.com/passportjs/no-access-token-no-service-7fb017c9e262"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-f794-r6xc-hf3v","url":"https://osv.dev/vulnerability/GHSA-f794-r6xc-hf3v"}],"summary":"Improper Access Control in passport-oauth2"}