{"action":"Upgrade react-editable-json-tree to 2.2.2 or later.","affected":[{"fixed":"2.2.2","introduced":"0"}],"component":"react-editable-json-tree","cve_ids":["CVE-2022-36010"],"ecosystem":"npm","epss":0.01487,"exploited":false,"fixed_versions":["2.2.2"],"ghsa_id":"GHSA-j3rv-w43q-f9x2","id":"tcs_01M5KFWRQHG3BD1PD6C30MZN3J","modified_at":"2023-11-08T04:09:57.142719Z","published_at":"2022-08-18T19:15:28Z","references":["https://osv.dev/vulnerability/GHSA-j3rv-w43q-f9x2","https://github.com/oxyno-zeta/react-editable-json-tree/security/advisories/GHSA-j3rv-w43q-f9x2","https://nvd.nist.gov/vuln/detail/CVE-2022-36010","https://github.com/oxyno-zeta/react-editable-json-tree","https://github.com/oxyno-zeta/react-editable-json-tree/releases/tag/2.2.2"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-j3rv-w43q-f9x2","url":"https://osv.dev/vulnerability/GHSA-j3rv-w43q-f9x2"}],"summary":"React Editable Json Tree vulnerable to arbitrary code execution via function parsing"}