{"action":"Upgrade hummus to 1.0.111 or later.","affected":[{"fixed":"1.0.111","introduced":"1.0.0"}],"component":"hummus","cve_ids":["CVE-2022-25885"],"ecosystem":"npm","epss":0.01242,"exploited":false,"fixed_versions":["1.0.111"],"ghsa_id":"GHSA-frp9-2v6r-gj97","id":"tcs_01M5KFP6MWRZ9RBKPKA5ET80YC","modified_at":"2023-11-08T04:08:50.709379Z","published_at":"2022-11-01T12:00:30Z","references":["https://osv.dev/vulnerability/GHSA-frp9-2v6r-gj97","https://nvd.nist.gov/vuln/detail/CVE-2022-25885","https://github.com/galkahana/HummusJS/issues/439","https://github.com/julianhille/MuhammaraJS/issues/188","https://github.com/galkahana/HummusJS/commit/a9bf2520ab5abb69f9328906e406fbebfb36159a","https://github.com/julianhille/MuhammaraJS/commit/0a6427eec82ef2978995e453de2dc0d6224dd46c","https://github.com/julianhille/MuhammaraJS","https://security.snyk.io/vuln/SNYK-JS-HUMMUS-3091139","https://security.snyk.io/vuln/SNYK-JS-MUHAMMARA-3091137"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-frp9-2v6r-gj97","url":"https://osv.dev/vulnerability/GHSA-frp9-2v6r-gj97"}],"summary":"muhammara and hummus vulnerable to null pointer dereference on bad response object"}