{"action":"Upgrade openmage/magento-lts to 19.4.15 or later.","affected":[{"fixed":"19.4.15","introduced":"0"},{"fixed":"20.0.13","introduced":"20.0.0"}],"component":"openmage/magento-lts","cve_ids":["CVE-2021-32758"],"ecosystem":"Packagist","epss":0.02009,"exploited":false,"fixed_versions":["19.4.15","20.0.13"],"ghsa_id":"GHSA-26rr-v2j2-25fh","id":"tcs_01M5KERM3WKR2WYWQ4YX1G09H0","modified_at":"2026-07-08T06:28:25.650614657Z","published_at":"2021-08-30T17:20:52Z","references":["https://osv.dev/vulnerability/GHSA-26rr-v2j2-25fh","https://github.com/OpenMage/magento-lts/security/advisories/GHSA-26rr-v2j2-25fh","https://nvd.nist.gov/vuln/detail/CVE-2021-32758","https://github.com/OpenMage/magento-lts/commit/b99307d00b59c4a226a1e3e4083f02cf2fc8fce7","https://github.com/OpenMage/magento-lts/releases/tag/v19.4.15","https://github.com/OpenMage/magento-lts/releases/tag/v20.0.13"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-26rr-v2j2-25fh","url":"https://osv.dev/vulnerability/GHSA-26rr-v2j2-25fh"}],"summary":"Layout XML Arbitrary Code Fix"}