{"action":"Upgrade cartalyst/sentry to 2.1.7 or later.","affected":[{"fixed":"2.1.7","introduced":"0"}],"component":"cartalyst/sentry","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.1.7"],"ghsa_id":"GHSA-2m5g-8xpw-42vp","id":"tcs_01M5KES1PFEE52GA5BP8W174CV","modified_at":"2026-07-15T22:00:51.183598367Z","published_at":"2024-05-15T18:07:44Z","references":["https://osv.dev/vulnerability/GHSA-2m5g-8xpw-42vp","https://github.com/cartalyst/sentry/commit/c679730b8848686f59125cd821bf94946fb16a94","https://github.com/FriendsOfPHP/security-advisories/blob/master/cartalyst/sentry/2016-09-05.yaml","https://github.com/cartalyst/sentry","https://github.com/cartalyst/sentry/releases/tag/v2.1.7","https://haxx.ml/post/149975211631/how-i-hacked-your-cfp-and-probably-some-other","https://web.archive.org/web/20180119075946/https://haxx.ml/post/149975211631/how-i-hacked-your-cfp-and-probably-some-other"],"severity":{"label":"high","score":8.9},"sources":[{"source":"osv","source_id":"GHSA-2m5g-8xpw-42vp","url":"https://osv.dev/vulnerability/GHSA-2m5g-8xpw-42vp"}],"summary":"OpenCFP Framework (Sentry) Account takeover via null password reset codes"}