{"action":"Upgrade uptime-kuma to 1.23.7 or later.","affected":[{"fixed":"1.23.7","introduced":"1.23.0"}],"component":"uptime-kuma","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.23.7"],"ghsa_id":"GHSA-hfxh-rjv7-2369","id":"tcs_01M5KFTZCYX4RQZKKMQX0AEWYZ","modified_at":"2023-11-27T17:25:11Z","published_at":"2023-11-27T17:25:11Z","references":["https://osv.dev/vulnerability/GHSA-hfxh-rjv7-2369","https://github.com/louislam/uptime-kuma/security/advisories/GHSA-hfxh-rjv7-2369","https://github.com/louislam/uptime-kuma"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hfxh-rjv7-2369","url":"https://osv.dev/vulnerability/GHSA-hfxh-rjv7-2369"}],"summary":"Uptime Kuma Authenticated remote code execution via TailscalePing"}