{"action":"Upgrade silverstripe/silverstripe-omnipay to 2.5.2 or later.","affected":[{"fixed":"2.5.2","introduced":"0"},{"fixed":"3.0.2","introduced":"3.0.0"},{"fixed":"3.1.4","introduced":"3.1.0"},{"fixed":"3.2.1","introduced":"3.2.0"}],"component":"silverstripe/silverstripe-omnipay","cve_ids":["CVE-2022-29254"],"ecosystem":"Packagist","epss":0.00666,"exploited":false,"fixed_versions":["2.5.2","3.0.2","3.1.4","3.2.1"],"ghsa_id":"GHSA-48f2-m7jg-866x","id":"tcs_01M5KETT99FK46GFN5WT02V7CD","modified_at":"2023-11-08T04:09:12.475806Z","published_at":"2022-06-06T21:24:39Z","references":["https://osv.dev/vulnerability/GHSA-48f2-m7jg-866x","https://github.com/silverstripe/silverstripe-omnipay/security/advisories/GHSA-48f2-m7jg-866x","https://nvd.nist.gov/vuln/detail/CVE-2022-29254","https://github.com/silverstripe/silverstripe-omnipay/commit/7dee9a1e0a5f54c2dc06e018cff3d9a19044e01b","https://github.com/silverstripe/silverstripe-omnipay","https://github.com/silverstripe/silverstripe-omnipay/releases/tag/2.5.2","https://github.com/silverstripe/silverstripe-omnipay/releases/tag/3.0.2","https://github.com/silverstripe/silverstripe-omnipay/releases/tag/3.1.4","https://github.com/silverstripe/silverstripe-omnipay/releases/tag/3.2.1"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-48f2-m7jg-866x","url":"https://osv.dev/vulnerability/GHSA-48f2-m7jg-866x"}],"summary":"Failed payment recorded has completed in Silverstripe Omnipay"}