{"action":"Upgrade valine to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"}],"component":"valine","cve_ids":["CVE-2022-38545"],"ecosystem":"npm","epss":0.34128,"exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-mcvg-g9wx-v5vx","id":"tcs_01M5KG0GFZWKFCTYWFX0HVE6CX","modified_at":"2023-11-08T04:10:12.172660Z","published_at":"2022-09-20T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-mcvg-g9wx-v5vx","https://nvd.nist.gov/vuln/detail/CVE-2022-38545","https://github.com/xCss/Valine/issues/400","https://github.com/xCss/Valine/commit/c40826c5816c98d797a6b1ed8b62bddf73ed4f65","https://github.com/xCss/Valine","https://github.com/xCss/Valine/releases/tag/v1.5.0"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-mcvg-g9wx-v5vx","url":"https://osv.dev/vulnerability/GHSA-mcvg-g9wx-v5vx"}],"summary":"Valine code injection vulnerability"}