{"action":"Upgrade @account-kit/smart-contracts to 4.28.2 or later.","affected":[{"fixed":"4.28.2","introduced":"4.8.0"}],"component":"@account-kit/smart-contracts","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.28.2"],"ghsa_id":"GHSA-wfm2-rq5g-f8v5","id":"tcs_01M5KGEXCK6NEXRSQ3YBZG3JRT","modified_at":"2025-04-29T15:11:41Z","published_at":"2025-04-29T15:11:41Z","references":["https://osv.dev/vulnerability/GHSA-wfm2-rq5g-f8v5","https://github.com/alchemyplatform/aa-sdk/security/advisories/GHSA-wfm2-rq5g-f8v5","https://github.com/alchemyplatform/aa-sdk/commit/b65bafdb9eec3a009df2cbabf09a35a76550e9d0","https://github.com/alchemyplatform/aa-sdk"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-wfm2-rq5g-f8v5","url":"https://osv.dev/vulnerability/GHSA-wfm2-rq5g-f8v5"}],"summary":"@account-kit/smart-contracts Allowlist Module Bypass Vulnerability"}