{"action":"Upgrade parse-server to 4.10.11 or later.","affected":[{"fixed":"4.10.11","introduced":"0"},{"fixed":"5.2.2","introduced":"5.0.0"}],"component":"parse-server","cve_ids":["CVE-2022-31083"],"ecosystem":"npm","epss":0.00888,"exploited":false,"fixed_versions":["4.10.11","5.2.2"],"ghsa_id":"GHSA-rh9j-f5f8-rvgc","id":"tcs_01M5KG951CHJT7X623XK33FZDV","modified_at":"2023-12-06T01:02:18.318373Z","published_at":"2022-06-17T22:09:09Z","references":["https://osv.dev/vulnerability/GHSA-rh9j-f5f8-rvgc","https://github.com/parse-community/parse-server/security/advisories/GHSA-rh9j-f5f8-rvgc","https://nvd.nist.gov/vuln/detail/CVE-2022-31083","https://github.com/parse-community/parse-server/pull/8054","https://github.com/parse-community/parse-server/pull/8054/commits/0cc299f82e367518f2fe7a53b99f3f801a338cf4","https://github.com/parse-community/parse-server/pull/8054/commits/2084b7c569697a5230e42511799eeac9219db5a9","https://github.com/parse-community/parse-server/commit/ba2b0a9cb9a568817a114b132a4c2e0911d76df1","https://developer.apple.com/news/?id=stttq465","https://github.com/parse-community/parse-server"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-rh9j-f5f8-rvgc","url":"https://osv.dev/vulnerability/GHSA-rh9j-f5f8-rvgc"}],"summary":"Authentication bypass vulnerability in Apple Game Center auth adapter"}