{"action":"Upgrade automattic/jetpack to 9.8 or later.","affected":[{"fixed":"9.8","introduced":"0"}],"component":"automattic/jetpack","cve_ids":["CVE-2021-24374"],"ecosystem":"Packagist","epss":0.01494,"exploited":false,"fixed_versions":["9.8"],"ghsa_id":"GHSA-5hr6-r8h6-wh22","id":"tcs_01M5KEW4EP20N2CQ38JY61YJHB","modified_at":"2026-09-10T03:49:19.998226618Z","published_at":"2022-05-24T19:05:47Z","references":["https://osv.dev/vulnerability/GHSA-5hr6-r8h6-wh22","https://nvd.nist.gov/vuln/detail/CVE-2021-24374","https://github.com/Automattic/jetpack-production","https://jetpack.com/2021/06/01/jetpack-9-8-engage-your-audience-with-wordpress-stories","https://wpscan.com/vulnerability/08a8a51c-49d3-4bce-b7e0-e365af1d8f33"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-5hr6-r8h6-wh22","url":"https://osv.dev/vulnerability/GHSA-5hr6-r8h6-wh22"}],"summary":"JetPack Exposure of Resource to Wrong Sphere"}