{"action":"Upgrade nukeviet/nukeviet to 4.3.04 or later.","affected":[{"fixed":"4.3.04","introduced":"0"}],"component":"nukeviet/nukeviet","cve_ids":["CVE-2019-7725"],"ecosystem":"Packagist","epss":0.02566,"exploited":false,"fixed_versions":["4.3.04"],"ghsa_id":"GHSA-32wr-8wxm-852c","id":"tcs_01M5KESFQWKKHCZCXXXE913TC8","modified_at":"2023-11-08T04:01:39.283508Z","published_at":"2021-06-22T15:24:59Z","references":["https://osv.dev/vulnerability/GHSA-32wr-8wxm-852c","https://nvd.nist.gov/vuln/detail/CVE-2019-7725","https://github.com/nukeviet/nukeviet/pull/2740/commits/05dfb9b4531f12944fe39556f58449b9a56241be","https://github.com/nukeviet/nukeviet/blob/4.3.04/CHANGELOG.txt","https://github.com/nukeviet/nukeviet/blob/nukeviet4.3/CHANGELOG.txt","https://github.com/nukeviet/nukeviet/compare/4.3.03...4.3.04"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-32wr-8wxm-852c","url":"https://osv.dev/vulnerability/GHSA-32wr-8wxm-852c"}],"summary":"Deserialization of Untrusted Data in NukeViet"}