{"action":"Upgrade @metamask/eth-ledger-bridge-keyring to 0.2.2 or later.","affected":[{"fixed":"0.2.2","introduced":"0"}],"component":"@metamask/eth-ledger-bridge-keyring","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["0.2.2"],"ghsa_id":"GHSA-vg44-fw64-cpjx","id":"tcs_01M5KGBSVA2V94XE7C612K211K","modified_at":"2021-08-23T14:40:05Z","published_at":"2020-03-24T15:08:59Z","references":["https://osv.dev/vulnerability/GHSA-vg44-fw64-cpjx","https://github.com/MetaMask/eth-ledger-bridge-keyring/security/advisories/GHSA-vg44-fw64-cpjx","https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/14","https://github.com/MetaMask/eth-ledger-bridge-keyring/commit/f32e529d13a53e55f558d903534d631846dc26ce","https://github.com/advisories/GHSA-vg44-fw64-cpjx","https://snyk.io/vuln/SNYK-JS-ETHLEDGERBRIDGEKEYRING-561121","https://www.npmjs.com/advisories/1497","https://www.npmjs.com/advisories/1498"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vg44-fw64-cpjx#npm/@metamask/eth-ledger-bridge-keyring","url":"https://osv.dev/vulnerability/GHSA-vg44-fw64-cpjx"}],"summary":"Incorrect Account Used for Signing"}