{"action":"Upgrade @valtimo/components to 10.8.4 or later.","affected":[{"fixed":"10.8.4","introduced":"0"},{"fixed":"11.1.6","introduced":"11.0.0"},{"fixed":"11.2.2","introduced":"11.2.0"}],"component":"@valtimo/components","cve_ids":["CVE-2024-34706"],"ecosystem":"npm","epss":0.01057,"exploited":false,"fixed_versions":["10.8.4","11.1.6","11.2.2"],"ghsa_id":"GHSA-xcp4-62vj-cq3r","id":"tcs_01M5KGHP8S844ANNNF1B32N9VK","modified_at":"2026-09-10T03:50:14.583142712Z","published_at":"2024-05-13T16:04:55Z","references":["https://osv.dev/vulnerability/GHSA-xcp4-62vj-cq3r","https://github.com/valtimo-platform/valtimo-frontend-libraries/security/advisories/GHSA-xcp4-62vj-cq3r","https://nvd.nist.gov/vuln/detail/CVE-2024-34706","https://github.com/valtimo-platform/valtimo-frontend-libraries/commit/1aaba5ef5750dafebbc7476fb08bf2375a25f19e","https://github.com/valtimo-platform/valtimo-frontend-libraries/commit/8c2dbf2a41180d2b0358d878290e4d37168f0fb6","https://github.com/valtimo-platform/valtimo-frontend-libraries/commit/d65e05fd2784bd4a628778b34a5b79ce2f0cef8c","https://github.com/valtimo-platform/valtimo-frontend-libraries"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xcp4-62vj-cq3r","url":"https://osv.dev/vulnerability/GHSA-xcp4-62vj-cq3r"}],"summary":"@valtimo/components exposes access token to form.io"}