{"action":"Upgrade @solana/pay to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0"}],"component":"@solana/pay","cve_ids":["CVE-2022-35917"],"ecosystem":"npm","epss":0.00866,"exploited":false,"fixed_versions":["0.2.1"],"ghsa_id":"GHSA-j47c-j42c-mwqq","id":"tcs_01M5KFWVEZRKMGYJ6V8X7938ZE","modified_at":"2023-11-08T04:09:52.493322Z","published_at":"2022-08-06T05:39:18Z","references":["https://osv.dev/vulnerability/GHSA-j47c-j42c-mwqq","https://github.com/solana-labs/solana-pay/security/advisories/GHSA-j47c-j42c-mwqq","https://nvd.nist.gov/vuln/detail/CVE-2022-35917","https://github.com/solana-labs/solana-pay/commit/ac6ce0d0a81137700874a8bf5a7caac3be999fad","https://github.com/solana-labs/solana-pay","https://github.com/solana-labs/solana-pay/blob/master/SPEC.md#reference","https://github.com/solana-labs/solana-pay/blob/master/core/src/validateTransfer.ts"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-j47c-j42c-mwqq","url":"https://osv.dev/vulnerability/GHSA-j47c-j42c-mwqq"}],"summary":"Solana Pay Vulnerable to Weakness in Transfer Validation Logic"}