{"action":"Upgrade ezsystems/ezplatform-kernel to 1.3.19 or later.","affected":[{"fixed":"1.3.19","introduced":"1.3.0"}],"component":"ezsystems/ezplatform-kernel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.3.19"],"ghsa_id":"GHSA-342c-vcff-2ff2","id":"tcs_01M5KESHHCQHNZZNP2HM9GKF9Y","modified_at":"2026-02-04T02:54:31.424916Z","published_at":"2022-06-02T20:53:43Z","references":["https://osv.dev/vulnerability/GHSA-342c-vcff-2ff2","https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-342c-vcff-2ff2","https://developers.ibexa.co/security-advisories/ibexa-sa-2022-006-vulnerabilities-in-page-builder-login-and-commerce","https://github.com/ezsystems/ezplatform-kernel"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-342c-vcff-2ff2","url":"https://osv.dev/vulnerability/GHSA-342c-vcff-2ff2"}],"summary":"Login timing attack in ezsystems/ezplatform-kernel"}