{"action":"Upgrade fuel/core to 1.8.0.4 or later.","affected":[{"fixed":"1.8.0.4","introduced":"0"}],"component":"fuel/core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.8.0.4"],"ghsa_id":"GHSA-26hp-cgjj-m2j3","id":"tcs_01M5KERKZP7FTTVXXG6CRH2G66","modified_at":"2024-11-29T05:41:52.002545Z","published_at":"2024-05-15T21:44:46Z","references":["https://osv.dev/vulnerability/GHSA-26hp-cgjj-m2j3","https://github.com/fuel/core/commit/95c134e9e087f3c4523fe6cd86ed4e9e1e7af91c","https://fuelphp.com/security-advisories","https://github.com/FriendsOfPHP/security-advisories/blob/master/fuel/core/2016-06-29-1.yaml","https://github.com/fuel/core"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-26hp-cgjj-m2j3","url":"https://osv.dev/vulnerability/GHSA-26hp-cgjj-m2j3"}],"summary":"fuel/core ImageMagick driver does not escape all shell arguments."}