{"action":"Upgrade mustache/mustache to 2.14.1 or later.","affected":[{"fixed":"2.14.1","introduced":"2.0.0"}],"component":"mustache/mustache","cve_ids":["CVE-2022-0323"],"ecosystem":"Packagist","epss":0.00672,"exploited":false,"fixed_versions":["2.14.1"],"ghsa_id":"GHSA-4rmr-c2jx-vx27","id":"tcs_01M5KEV93QYV7067JSPAQCR1Y9","modified_at":"2024-02-16T07:59:53.974944Z","published_at":"2022-01-27T14:51:00Z","references":["https://osv.dev/vulnerability/GHSA-4rmr-c2jx-vx27","https://nvd.nist.gov/vuln/detail/CVE-2022-0323","https://github.com/bobthecow/mustache.php/commit/579ffa5c96e1d292c060b3dd62811ff01ad8c24e","https://github.com/FriendsOfPHP/security-advisories/blob/master/mustache/mustache/CVE-2022-0323.yaml","https://github.com/bobthecow/mustache.php","https://github.com/bobthecow/mustache.php/releases/tag/v2.14.1","https://huntr.dev/bounties/a5f5a988-aa52-4443-839d-299a63f44fb7"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-4rmr-c2jx-vx27","url":"https://osv.dev/vulnerability/GHSA-4rmr-c2jx-vx27"}],"summary":"Mustache remote code injection vulnerability"}