{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.21.2"}],"component":"@perfood/couch-auth","cve_ids":["CVE-2024-57177"],"ecosystem":"npm","epss":0.00318,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r385-c5fc-x56c","id":"tcs_01M5KG7QQHMT5TPF4DJQYSBZ43","modified_at":"2025-12-18T16:11:14.520289Z","published_at":"2025-02-10T21:31:39Z","references":["https://osv.dev/vulnerability/GHSA-r385-c5fc-x56c","https://nvd.nist.gov/vuln/detail/CVE-2024-57177","https://github.com/perfood/couch-auth","https://github.com/waristea/cve-research/tree/main/CVE-2024-57177"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-r385-c5fc-x56c","url":"https://osv.dev/vulnerability/GHSA-r385-c5fc-x56c"}],"summary":"CouchAuth has a Server-Side Template Injection vulnerability in its email functionality"}