{"action":"Upgrade next-auth to 3.29.8 or later.","affected":[{"fixed":"3.29.8","introduced":"0"},{"fixed":"4.9.0","introduced":"4.0.0"}],"component":"next-auth","cve_ids":["CVE-2022-31127"],"ecosystem":"npm","epss":0.01132,"exploited":false,"fixed_versions":["3.29.8","4.9.0"],"ghsa_id":"GHSA-pgjx-7f9g-9463","id":"tcs_01M5KG3KQE8SB4GMDPXV07VR0C","modified_at":"2023-11-08T04:09:27.055295Z","published_at":"2022-07-06T19:27:45Z","references":["https://osv.dev/vulnerability/GHSA-pgjx-7f9g-9463","https://github.com/nextauthjs/next-auth/security/advisories/GHSA-pgjx-7f9g-9463","https://nvd.nist.gov/vuln/detail/CVE-2022-31127","https://github.com/nextauthjs/next-auth/commit/ae834f1e08a4a9915665eecb9479c74c6b039c9c","https://github.com/nextauthjs/next-auth","https://github.com/nextauthjs/next-auth/releases/tag/next-auth%40v4.9.0","https://next-auth.js.org/getting-started/upgrade-v4","https://next-auth.js.org/providers/email#customizing-emails"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-pgjx-7f9g-9463","url":"https://osv.dev/vulnerability/GHSA-pgjx-7f9g-9463"}],"summary":"Improper handling of email input"}