{"action":"Upgrade urijs to 1.19.8 or later.","affected":[{"fixed":"1.19.8","introduced":"0"}],"component":"urijs","cve_ids":["CVE-2022-0613"],"ecosystem":"npm","epss":0.01537,"exploited":false,"fixed_versions":["1.19.8"],"ghsa_id":"GHSA-gcv8-gh4r-25x6","id":"tcs_01M5KFRD96TEKRSVSTAB0KMPT0","modified_at":"2023-11-08T04:07:37.084968Z","published_at":"2022-02-17T00:00:35Z","references":["https://osv.dev/vulnerability/GHSA-gcv8-gh4r-25x6","https://nvd.nist.gov/vuln/detail/CVE-2022-0613","https://github.com/medialize/uri.js/commit/6ea641cc8648b025ed5f30b090c2abd4d1a5249f","https://github.com/medialize/uri.js","https://huntr.dev/bounties/f53d5c42-c108-40b8-917d-9dad51535083","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MXSSATHALUSXXD2KT6UFZAX7EG4GR332"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-gcv8-gh4r-25x6","url":"https://osv.dev/vulnerability/GHSA-gcv8-gh4r-25x6"}],"summary":"Authorization Bypass Through User-Controlled Key in urijs"}