{"action":"Upgrade webpack to 5.76.0 or later.","affected":[{"fixed":"5.76.0","introduced":"5.0.0"}],"component":"webpack","cve_ids":["CVE-2023-28154"],"ecosystem":"npm","epss":0.01409,"exploited":false,"fixed_versions":["5.76.0"],"ghsa_id":"GHSA-hc6q-2mpp-qw7j","id":"tcs_01M5KFTQGXST211Z343QK2XWZE","modified_at":"2023-11-08T04:12:09.414542Z","published_at":"2023-03-13T03:30:15Z","references":["https://osv.dev/vulnerability/GHSA-hc6q-2mpp-qw7j","https://nvd.nist.gov/vuln/detail/CVE-2023-28154","https://github.com/webpack/webpack/pull/16500","https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AU7BOXTBK3KDYSWH67ASZ22TUIOZ3X5G","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PPSAXUTXBCCTAHTCX5BUR4YVP25XALQ3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2AFCM6FFE3LRYI6KNEQWKMXMQOBZQ2D"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hc6q-2mpp-qw7j","url":"https://osv.dev/vulnerability/GHSA-hc6q-2mpp-qw7j"}],"summary":"Cross-realm object access in Webpack 5"}