{"action":"Upgrade @openzeppelin/contracts-upgradeable to 4.3.2 or later.","affected":[{"fixed":"4.3.2","introduced":"4.1.0"}],"component":"@openzeppelin/contracts-upgradeable","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.3.2"],"ghsa_id":"GHSA-q4h9-46xg-m3x9","id":"tcs_01M5KG53PC5G1TDXWY642HJBST","modified_at":"2021-09-14T22:17:40Z","published_at":"2021-09-15T20:22:13Z","references":["https://osv.dev/vulnerability/GHSA-q4h9-46xg-m3x9","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable/security/advisories/GHSA-q4h9-46xg-m3x9","https://github.com/OpenZeppelin/openzeppelin-contracts-upgradeable"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-q4h9-46xg-m3x9","url":"https://osv.dev/vulnerability/GHSA-q4h9-46xg-m3x9"}],"summary":"UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable"}