{"action":"Upgrade basti-cdk to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"basti-cdk","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-q4pp-j36h-3gqg","id":"tcs_01M5KG54HXHGDMC2DWGBN6E55H","modified_at":"2023-08-24T12:53:06Z","published_at":"2023-08-24T12:53:06Z","references":["https://osv.dev/vulnerability/GHSA-q4pp-j36h-3gqg","https://github.com/BohdanPetryshyn/basti/security/advisories/GHSA-q4pp-j36h-3gqg","https://github.com/BohdanPetryshyn/basti/commit/f6f218e7cd450e29aeb616960b7abbe8dfc87796","https://github.com/BohdanPetryshyn/basti"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-q4pp-j36h-3gqg","url":"https://osv.dev/vulnerability/GHSA-q4pp-j36h-3gqg"}],"summary":"Minimal `basti` IAM Policy Allows Shell Access"}