{"action":"Upgrade magento/community-edition to 1.14.3.2 or later.","affected":[{"fixed":"1.14.3.2","introduced":"1.9.0.0"}],"component":"magento/community-edition","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.14.3.2"],"ghsa_id":"GHSA-26hq-7286-mg8f","id":"tcs_01M5KERM1HM592ME90SYPF4NB1","modified_at":"2024-05-15T22:33:44Z","published_at":"2024-05-15T22:33:44Z","references":["https://osv.dev/vulnerability/GHSA-26hq-7286-mg8f","https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ee/2017-02-07.yaml","https://github.com/magento/magento2","https://web.archive.org/web/20210616204105/https://magento.com/security/patches/supee-9652"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-26hq-7286-mg8f","url":"https://osv.dev/vulnerability/GHSA-26hq-7286-mg8f"}],"summary":"Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability"}