{"action":"Upgrade @azure/ms-rest-nodeauth to 3.0.8 or later.","affected":[{"fixed":"3.0.8","introduced":"0"}],"component":"@azure/ms-rest-nodeauth","cve_ids":["CVE-2021-28458"],"ecosystem":"npm","epss":0.01956,"exploited":false,"fixed_versions":["3.0.8"],"ghsa_id":"GHSA-qpfw-4m9x-rxx8","id":"tcs_01M5KG6PQJAQWEGFAX4YZN2MTK","modified_at":"2024-01-02T14:13:05Z","published_at":"2022-05-24T17:47:26Z","references":["https://osv.dev/vulnerability/GHSA-qpfw-4m9x-rxx8","https://nvd.nist.gov/vuln/detail/CVE-2021-28458","https://github.com/Azure/ms-rest-nodeauth/commit/1b8dcfb6d7e1c8a0a00044286021a841961cf636","https://github.com/Azure/ms-rest-nodeauth","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28458"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-qpfw-4m9x-rxx8","url":"https://osv.dev/vulnerability/GHSA-qpfw-4m9x-rxx8"}],"summary":"Improper Privilege Management in Azure ms-rest-nodeauth"}