{"action":"Upgrade pimcore/pimcore to 11.5.19 or later.","affected":[{"fixed":"2026.1.6","introduced":"2026.1.0"},{"fixed":"12.3.10","introduced":"12.0.0-RC1"},{"fixed":"11.5.19","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2026-55416"],"ecosystem":"Packagist","epss":0.0065,"exploited":false,"fixed_versions":["2026.1.6","12.3.10","11.5.19"],"ghsa_id":"GHSA-23rh-xw42-fq82","id":"tcs_01M5KERFPP483QSH7F2QAPEYYP","modified_at":"2026-09-10T19:30:05.084198426Z","published_at":"2026-09-10T19:25:05Z","references":["https://osv.dev/vulnerability/GHSA-23rh-xw42-fq82","https://github.com/pimcore/pimcore/security/advisories/GHSA-23rh-xw42-fq82","https://github.com/pimcore/pimcore","https://github.com/pimcore/pimcore/releases/tag/v11.5.19","https://github.com/pimcore/pimcore/releases/tag/v12.3.10","https://github.com/pimcore/pimcore/releases/tag/v2026.1.6"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-23rh-xw42-fq82","url":"https://osv.dev/vulnerability/GHSA-23rh-xw42-fq82"}],"summary":"Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration"}