{"action":"Upgrade AgileConfig.Client to 1.6.8 or later.","affected":[{"fixed":"1.6.8","introduced":"0"}],"component":"AgileConfig.Client","cve_ids":["CVE-2022-35540"],"ecosystem":"NuGet","epss":0.01478,"exploited":false,"fixed_versions":["1.6.8"],"ghsa_id":"GHSA-mj5w-w588-j6xg","id":"tcs_01M5N8TWFZT8CB7FR3VYVFS1ZT","modified_at":"2023-11-08T04:09:51.086306Z","published_at":"2022-08-19T00:00:16Z","references":["https://osv.dev/vulnerability/GHSA-mj5w-w588-j6xg","https://nvd.nist.gov/vuln/detail/CVE-2022-35540","https://github.com/dotnetcore/AgileConfig/issues/91","https://github.com/dotnetcore/AgileConfig"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mj5w-w588-j6xg","url":"https://osv.dev/vulnerability/GHSA-mj5w-w588-j6xg"}],"summary":"Use of Hard-coded Credentials in AgileConfig.Client"}