{"action":"Upgrade cruddl to 2.7.0 or later.","affected":[{"fixed":"3.0.2","introduced":"3.0.0"},{"fixed":"2.7.0","introduced":"1.1.0"}],"component":"cruddl","cve_ids":["CVE-2022-36084"],"ecosystem":"npm","epss":0.01496,"exploited":false,"fixed_versions":["3.0.2","2.7.0"],"ghsa_id":"GHSA-qm4w-4995-vg7f","id":"tcs_01M5KG6G3TDXEAC66DSSBQDV5B","modified_at":"2023-11-08T04:10:00.186180Z","published_at":"2022-09-16T17:43:10Z","references":["https://osv.dev/vulnerability/GHSA-qm4w-4995-vg7f","https://github.com/AEB-labs/cruddl/security/advisories/GHSA-qm4w-4995-vg7f","https://nvd.nist.gov/vuln/detail/CVE-2022-36084","https://github.com/AEB-labs/cruddl/pull/253","https://github.com/AEB-labs/cruddl/commit/13b9233733ed6fc822718a07bc90a80cd3492698","https://github.com/AEB-labs/cruddl"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-qm4w-4995-vg7f","url":"https://osv.dev/vulnerability/GHSA-qm4w-4995-vg7f"}],"summary":"cruddl vulnerable to ArangoDB Query Language (AQL) injection through flexSearch"}