{"action":"Upgrade Bunkum to 4.2.1 or later.","affected":[{"fixed":"4.2.1","introduced":"4.0.0"}],"component":"Bunkum","cve_ids":["CVE-2023-45814"],"ecosystem":"NuGet","epss":0.00537,"exploited":false,"fixed_versions":["4.2.1"],"ghsa_id":"GHSA-jrf2-h5j6-3rrq","id":"tcs_01M5N8SYSEMQA9Q9HP6X6XA12H","modified_at":"2024-02-16T08:15:19.572841Z","published_at":"2023-10-19T16:11:59Z","references":["https://osv.dev/vulnerability/GHSA-jrf2-h5j6-3rrq","https://github.com/LittleBigRefresh/Bunkum/security/advisories/GHSA-jrf2-h5j6-3rrq","https://nvd.nist.gov/vuln/detail/CVE-2023-45814","https://github.com/LittleBigRefresh/Bunkum/commit/6e109464ed9255f558182f001f475a378405ff76","https://github.com/LittleBigRefresh/Bunkum"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jrf2-h5j6-3rrq","url":"https://osv.dev/vulnerability/GHSA-jrf2-h5j6-3rrq"}],"summary":"Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free"}