{"action":"Upgrade @vendure/core to 2.0.3 or later.","affected":[{"fixed":"2.0.3","introduced":"0"}],"component":"@vendure/core","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2.0.3"],"ghsa_id":"GHSA-h9wq-xcqx-mqxm","id":"tcs_01M5KFTNQP35TK74J2QF5MY39Y","modified_at":"2023-07-11T22:46:19Z","published_at":"2023-07-11T22:46:19Z","references":["https://osv.dev/vulnerability/GHSA-h9wq-xcqx-mqxm","https://github.com/vendure-ecommerce/vendure/security/advisories/GHSA-h9wq-xcqx-mqxm","https://github.com/vendure-ecommerce/vendure/commit/4a10d6785a3bf792ddf84053cdf232c205b82c81","https://github.com/vendure-ecommerce/vendure"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-h9wq-xcqx-mqxm","url":"https://osv.dev/vulnerability/GHSA-h9wq-xcqx-mqxm"}],"summary":"Vendure Cross Site Request Forgery vulnerability impacting all API requests"}