{"action":"Upgrade fhir-works-on-aws-authz-smart to 3.1.3 or later.","affected":[{"fixed":"3.1.3","introduced":"3.1.1"}],"component":"fhir-works-on-aws-authz-smart","cve_ids":["CVE-2022-39230"],"ecosystem":"npm","epss":0.00742,"exploited":false,"fixed_versions":["3.1.3"],"ghsa_id":"GHSA-vv7x-7w4m-q72f","id":"tcs_01M5KGCZVM0JHBWECWGZVRSBTK","modified_at":"2023-11-08T04:10:15.897617Z","published_at":"2022-09-21T20:36:50Z","references":["https://osv.dev/vulnerability/GHSA-vv7x-7w4m-q72f","https://github.com/awslabs/fhir-works-on-aws-authz-smart/security/advisories/GHSA-vv7x-7w4m-q72f","https://nvd.nist.gov/vuln/detail/CVE-2022-39230","https://github.com/awslabs/fhir-works-on-aws-authz-smart/commit/203bbc0dd17de748c36b33c68b866ed2dfd613d3","https://github.com/awslabs/fhir-works-on-aws-authz-smart"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vv7x-7w4m-q72f","url":"https://osv.dev/vulnerability/GHSA-vv7x-7w4m-q72f"}],"summary":"fhir-works-on-aws-authz-smart handles permissions improperly"}