{"action":"Upgrade angular-server-side-configuration to 15.1.0 or later.","affected":[{"fixed":"15.1.0","introduced":"15.0.0"}],"component":"angular-server-side-configuration","cve_ids":["CVE-2023-28444"],"ecosystem":"npm","epss":0.00759,"exploited":false,"fixed_versions":["15.1.0"],"ghsa_id":"GHSA-gwvm-vrp4-4pp5","id":"tcs_01M5KFSPNM9XP6BMYKTDE5TWM9","modified_at":"2023-11-08T04:12:11.200223Z","published_at":"2023-03-24T22:04:35Z","references":["https://osv.dev/vulnerability/GHSA-gwvm-vrp4-4pp5","https://github.com/kyubisation/angular-server-side-configuration/security/advisories/GHSA-gwvm-vrp4-4pp5","https://nvd.nist.gov/vuln/detail/CVE-2023-28444","https://github.com/kyubisation/angular-server-side-configuration/commit/d701f51260637a84ede278e248934e0437a7ff86","https://github.com/kyubisation/angular-server-side-configuration","https://github.com/kyubisation/angular-server-side-configuration/releases/tag/v15.1.0"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-gwvm-vrp4-4pp5","url":"https://osv.dev/vulnerability/GHSA-gwvm-vrp4-4pp5"}],"summary":"angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend"}