{"action":"Upgrade ibexa/post-install to 1.0.16 or later.","affected":[{"fixed":"1.0.16","introduced":"1.0.0"},{"fixed":"4.6.14","introduced":"4.6.0"}],"component":"ibexa/post-install","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.0.16","4.6.14"],"ghsa_id":"GHSA-4h8f-c635-25p7","id":"tcs_01M5KEV0ESJA7ZFCSQ5RHKBSZK","modified_at":"2024-12-02T18:47:31.047039Z","published_at":"2024-12-02T18:41:07Z","references":["https://osv.dev/vulnerability/GHSA-4h8f-c635-25p7","https://github.com/ezsystems/ezplatform-http-cache/security/advisories/GHSA-mgfg-7533-7jf6","https://github.com/ibexa/http-cache/security/advisories/GHSA-fh7v-q458-7vmw","https://github.com/ibexa/post-install/security/advisories/GHSA-4h8f-c635-25p7","https://github.com/ibexa/post-install/commit/d91cc02623dd3263a99a94ace133c95e48909e5d","https://developers.ibexa.co/security-advisories/ibexa-sa-2024-006-vulnerabilities-in-content-name-pattern-commerce-shop-and-varnish-vhost-templates","https://doc.ibexa.co/en/latest/update_and_migration/from_3.3/update_from_3.3/#v3341","https://doc.ibexa.co/en/latest/update_and_migration/from_4.6/update_from_4.6/#v4614","https://github.com/ibexa/post-install","https://www.breachattack.com"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-4h8f-c635-25p7","url":"https://osv.dev/vulnerability/GHSA-4h8f-c635-25p7"}],"summary":"ibexa/post-install affected by Breach with Varnish VCL"}