{"action":"Upgrade @blakeembrey/template to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0"}],"component":"@blakeembrey/template","cve_ids":["CVE-2024-45390"],"ecosystem":"npm","epss":0.00433,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-q765-wm9j-66qj","id":"tcs_01M5KG5J38FFC9PZ73JKV1ZYYG","modified_at":"2024-11-18T16:27:09Z","published_at":"2024-09-03T19:42:25Z","references":["https://osv.dev/vulnerability/GHSA-q765-wm9j-66qj","https://github.com/blakeembrey/js-template/security/advisories/GHSA-q765-wm9j-66qj","https://nvd.nist.gov/vuln/detail/CVE-2024-45390","https://github.com/blakeembrey/js-template/commit/b8d9aa999e464816c6cfb14acd1ad0f5d1e335aa","https://github.com/blakeembrey/js-template"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-q765-wm9j-66qj","url":"https://osv.dev/vulnerability/GHSA-q765-wm9j-66qj"}],"summary":"@blakeembrey/template vulnerable to code injection when attacker controls template input"}