{"action":"Upgrade parse-server to 4.10.7 or later.","affected":[{"fixed":"4.10.7","introduced":"0"}],"component":"parse-server","cve_ids":["CVE-2022-24760"],"ecosystem":"npm","epss":0.49362,"exploited":false,"fixed_versions":["4.10.7"],"ghsa_id":"GHSA-p6h4-93qp-jhcm","id":"tcs_01M5KG2QER4XNBG49VQ2R03M19","modified_at":"2023-12-06T01:02:05.184263Z","published_at":"2022-03-11T23:53:23Z","references":["https://osv.dev/vulnerability/GHSA-p6h4-93qp-jhcm","https://github.com/parse-community/parse-server/security/advisories/GHSA-p6h4-93qp-jhcm","https://nvd.nist.gov/vuln/detail/CVE-2022-24760","https://github.com/parse-community/parse-server/commit/886bfd7cac69496e3f73d4bb536f0eec3cba0e4d","https://github.com/parse-community/parse-server","https://www.huntr.dev/bounties/ac24b343-e7da-4bc7-ab38-4f4f5cc9d099"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-p6h4-93qp-jhcm","url":"https://osv.dev/vulnerability/GHSA-p6h4-93qp-jhcm"}],"summary":"Command injection in Parse Server through prototype pollution"}