{"action":"Upgrade vp-toolkit to 0.2.2 or later.","affected":[{"fixed":"0.2.2","introduced":"0"}],"component":"vp-toolkit","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.2.2"],"ghsa_id":"GHSA-p94w-42g3-f7h4","id":"tcs_01M5KG34NK6DKC72MQBWXSWYB1","modified_at":"2020-02-28T16:38:09Z","published_at":"2020-03-06T01:16:00Z","references":["https://osv.dev/vulnerability/GHSA-p94w-42g3-f7h4","https://github.com/rabobank-blockchain/vp-toolkit/security/advisories/GHSA-p94w-42g3-f7h4","https://github.com/rabobank-blockchain/vp-toolkit/issues/13","https://github.com/rabobank-blockchain/vp-toolkit/commit/6315936d1d7913fd116fa51a0dbbd29d82c0ce17"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-p94w-42g3-f7h4","url":"https://osv.dev/vulnerability/GHSA-p94w-42g3-f7h4"}],"summary":"Holder can (re)create authentic credentials after receiving a credential in vp-toolkit"}