{"action":"Upgrade tiny-csrf to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"tiny-csrf","cve_ids":["CVE-2022-39287"],"ecosystem":"npm","epss":0.00508,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-pj2c-h76w-vv6f","id":"tcs_01M5KG3RNWAD9CTZ21R0J6WHEB","modified_at":"2023-11-08T04:10:17.775107Z","published_at":"2022-10-07T21:23:18Z","references":["https://osv.dev/vulnerability/GHSA-pj2c-h76w-vv6f","https://github.com/valexandersaulys/tiny-csrf/security/advisories/GHSA-pj2c-h76w-vv6f","https://nvd.nist.gov/vuln/detail/CVE-2022-39287","https://github.com/valexandersaulys/tiny-csrf/commit/8eead6da3b56e290512bbe8d20c2c5df3be317ba","https://github.com/valexandersaulys/tiny-csrf"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-pj2c-h76w-vv6f","url":"https://osv.dev/vulnerability/GHSA-pj2c-h76w-vv6f"}],"summary":"tiny-csrf has openly visible CSRF tokens"}