{"action":"Upgrade hov/jobfair to 1.0.13 or later.","affected":[{"fixed":"1.0.13","introduced":"0"},{"fixed":"2.0.2","introduced":"2.0.0"}],"component":"hov/jobfair","cve_ids":["CVE-2021-43564"],"ecosystem":"Packagist","epss":0.0103,"exploited":false,"fixed_versions":["1.0.13","2.0.2"],"ghsa_id":"GHSA-43g8-79x3-j898","id":"tcs_01M5KETGF9E9E2MQ4M8JDRJ4X9","modified_at":"2023-11-08T04:07:10.460286Z","published_at":"2021-11-15T17:36:22Z","references":["https://osv.dev/vulnerability/GHSA-43g8-79x3-j898","https://nvd.nist.gov/vuln/detail/CVE-2021-43564","https://github.com/nhovratov/jobfair","https://typo3.org/security/advisory/typo3-ext-sa-2021-018"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-43g8-79x3-j898","url":"https://osv.dev/vulnerability/GHSA-43g8-79x3-j898"}],"summary":"Unrestricted access to predictable file paths in hov/jobfair"}