{"action":"Upgrade @chainsafe/libp2p-noise to 4.1.2 or later.","affected":[{"fixed":"4.1.2","introduced":"0"},{"fixed":"5.0.3","introduced":"5.0.0"}],"component":"@chainsafe/libp2p-noise","cve_ids":["CVE-2022-24759"],"ecosystem":"npm","epss":0.00499,"exploited":false,"fixed_versions":["4.1.2","5.0.3"],"ghsa_id":"GHSA-j3ff-xp6c-6gcc","id":"tcs_01M5KFWPEP43H9M41GG49SXT2Y","modified_at":"2023-11-08T04:08:35.429768Z","published_at":"2022-03-18T18:57:53Z","references":["https://osv.dev/vulnerability/GHSA-j3ff-xp6c-6gcc","https://github.com/ChainSafe/js-libp2p-noise/security/advisories/GHSA-j3ff-xp6c-6gcc","https://nvd.nist.gov/vuln/detail/CVE-2022-24759","https://github.com/ChainSafe/js-libp2p-noise/pull/130","https://github.com/ChainSafe","https://github.com/ChainSafe/js-libp2p-noise/releases/tag/v5.0.3"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-j3ff-xp6c-6gcc","url":"https://osv.dev/vulnerability/GHSA-j3ff-xp6c-6gcc"}],"summary":"Failure to validate signature during handshake"}