{"action":"Upgrade tooljet to 1.27.0 or later.","affected":[{"fixed":"1.27.0","introduced":"0"}],"component":"tooljet","cve_ids":["CVE-2022-4111"],"ecosystem":"npm","epss":0.00804,"exploited":false,"fixed_versions":["1.27.0"],"ghsa_id":"GHSA-hgp8-w8fj-r4cm","id":"tcs_01M5KFV3CPRHMBBW053E1CC2JS","modified_at":"2023-11-08T04:10:27.026460Z","published_at":"2022-11-22T03:30:56Z","references":["https://osv.dev/vulnerability/GHSA-hgp8-w8fj-r4cm","https://nvd.nist.gov/vuln/detail/CVE-2022-4111","https://github.com/ToolJet/ToolJet/pull/4103","https://github.com/tooljet/tooljet/commit/01cd3f0464747973ec329e9fb1ea12743d3235cc","https://github.com/ToolJet/ToolJet","https://huntr.dev/bounties/5596d072-66d2-4361-8cac-101c9c781c3d"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-hgp8-w8fj-r4cm","url":"https://osv.dev/vulnerability/GHSA-hgp8-w8fj-r4cm"}],"summary":"ToolJet is vulnerable to Denial of Service (DoS)"}