{"action":"Upgrade @peertube/embed-api to 4.1.0-rc.1 or later.","affected":[{"fixed":"4.1.0-rc.1","introduced":"0"}],"component":"@peertube/embed-api","cve_ids":["CVE-2022-0508"],"ecosystem":"npm","epss":0.00893,"exploited":false,"fixed_versions":["4.1.0-rc.1"],"ghsa_id":"GHSA-mv26-cx23-vrfg","id":"tcs_01M5KG1PHABFT6HAV5ZCCZB7DB","modified_at":"2023-11-08T04:07:34.977805Z","published_at":"2022-02-09T00:00:31Z","references":["https://osv.dev/vulnerability/GHSA-mv26-cx23-vrfg","https://nvd.nist.gov/vuln/detail/CVE-2022-0508","https://github.com/chocobozzz/peertube/commit/f33e515991a32885622b217bf2ed1d1b0d9d6832","https://github.com/chocobozzz/peertube","https://huntr.dev/bounties/c3724574-b6c9-430b-849b-40dd2b20f23c"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-mv26-cx23-vrfg","url":"https://osv.dev/vulnerability/GHSA-mv26-cx23-vrfg"}],"summary":"Server-Side Request Forgery in @peertube/embed-api"}