{"action":"Upgrade passbolt/passbolt_api to 2.11.0 or later.","affected":[{"fixed":"2.11.0","introduced":"0"}],"component":"passbolt/passbolt_api","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.11.0"],"ghsa_id":"GHSA-2f46-4xjm-73x5","id":"tcs_01M5KERW4401ZETB7NQC7TM3W9","modified_at":"2024-12-05T05:39:39.663381Z","published_at":"2024-05-20T17:07:44Z","references":["https://osv.dev/vulnerability/GHSA-2f46-4xjm-73x5","https://github.com/passbolt/passbolt_api/commit/6135b483f72c6853e6085e329f5f8d7be60c9933","https://github.com/FriendsOfPHP/security-advisories/blob/master/passbolt/passbolt_api/2019-08-07-1.yaml","https://github.com/passbolt/passbolt_api","https://github.com/passbolt/passbolt_api/blob/master/CHANGELOG.md#2110---2019-08-08","https://www.passbolt.com/incidents/20190807_multiple_vulnerabilities"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-2f46-4xjm-73x5","url":"https://osv.dev/vulnerability/GHSA-2f46-4xjm-73x5"}],"summary":"Passbolt API Stored XSS on first/last name during setup"}