{"action":"Upgrade jsreport to 3.11.3 or later.","affected":[{"fixed":"3.11.3","introduced":"0"}],"component":"jsreport","cve_ids":["CVE-2023-2583"],"ecosystem":"npm","epss":0.01128,"exploited":false,"fixed_versions":["3.11.3"],"ghsa_id":"GHSA-g7rj-q722-245g","id":"tcs_01M5KFQXAXR8VJEBS3SDV9ATB2","modified_at":"2023-11-08T04:11:56.301908Z","published_at":"2023-05-08T18:30:17Z","references":["https://osv.dev/vulnerability/GHSA-g7rj-q722-245g","https://nvd.nist.gov/vuln/detail/CVE-2023-2583","https://github.com/jsreport/jsreport/commit/afaff3804b34b38e959f5ae65f9e672088de13d7","https://github.com/jsreport/jsreport","https://github.com/jsreport/jsreport/releases/tag/3.11.3","https://huntr.dev/bounties/397ea68d-1e28-44ff-b830-c8883d067d96"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-g7rj-q722-245g","url":"https://osv.dev/vulnerability/GHSA-g7rj-q722-245g"}],"summary":"jsreport vulnerable to code injection"}