{"action":"Upgrade grumpydictator/firefly-iii to 5.6.1 or later.","affected":[{"fixed":"5.6.1","introduced":"0"}],"component":"grumpydictator/firefly-iii","cve_ids":["CVE-2021-3819"],"ecosystem":"Packagist","epss":0.00541,"exploited":false,"fixed_versions":["5.6.1"],"ghsa_id":"GHSA-356r-77q8-f64f","id":"tcs_01M5KESKW6M21JWGWQJN04V0FH","modified_at":"2023-11-08T04:06:25.860921Z","published_at":"2021-09-29T17:12:37Z","references":["https://osv.dev/vulnerability/GHSA-356r-77q8-f64f","https://github.com/firefly-iii/firefly-iii/commit/578f350498b75f31d321c78a608c7f7b3b7b07e9","https://github.com/firefly-iii/firefly-iii","https://huntr.dev/bounties/da82f7b6-4ffc-4109-87a4-a2a790bd44e5"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-356r-77q8-f64f","url":"https://osv.dev/vulnerability/GHSA-356r-77q8-f64f"}],"summary":"Cross-Site Request Forgery in firefly-iii"}