{"action":"Upgrade wintercms/winter to 1.1.10 or later.","affected":[{"fixed":"1.1.10","introduced":"1.1.8"},{"fixed":"1.2.1","introduced":"1.2.0"}],"component":"wintercms/winter","cve_ids":["CVE-2022-39357"],"ecosystem":"Packagist","epss":0.01366,"exploited":false,"fixed_versions":["1.1.10","1.2.1"],"ghsa_id":"GHSA-3fh5-q6fg-w28q","id":"tcs_01M5KESY4DX7BYBQNBA269D3D4","modified_at":"2023-11-08T04:10:19.857893Z","published_at":"2022-10-27T18:36:42Z","references":["https://osv.dev/vulnerability/GHSA-3fh5-q6fg-w28q","https://github.com/wintercms/winter/security/advisories/GHSA-3fh5-q6fg-w28q","https://nvd.nist.gov/vuln/detail/CVE-2022-39357","https://github.com/wintercms/winter/commit/2a13faf99972e84c9661258f16c4750fa99d29a1","https://github.com/wintercms/winter/commit/bce4b59584abf961e9400af3d7a4fd7638e26c7f","https://github.com/wintercms/winter","https://github.com/wintercms/winter/releases/tag/v1.1.10","https://github.com/wintercms/winter/releases/tag/v1.2.1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-3fh5-q6fg-w28q","url":"https://osv.dev/vulnerability/GHSA-3fh5-q6fg-w28q"}],"summary":"Prototype pollution in Snowboard framework"}