{"action":"Upgrade jsdecena/laracom to 2.0.9 or later.","affected":[{"fixed":"2.0.9","introduced":"0"}],"component":"jsdecena/laracom","cve_ids":["CVE-2022-0472"],"ecosystem":"Packagist","epss":0.00792,"exploited":false,"fixed_versions":["2.0.9"],"ghsa_id":"GHSA-5q5w-mqp6-g2gh","id":"tcs_01M5KEWAKMBT14PY8503XT88EG","modified_at":"2023-11-08T04:07:34.353174Z","published_at":"2022-02-06T00:01:07Z","references":["https://osv.dev/vulnerability/GHSA-5q5w-mqp6-g2gh","https://nvd.nist.gov/vuln/detail/CVE-2022-0472","https://github.com/jsdecena/laracom/commit/256026193ce994dc4c1365e02f414d8a0cd77ae8","https://github.com/jsdecena/laracom","https://huntr.dev/bounties/cb5b8563-15cf-408c-9f79-4871ea0a8713"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-5q5w-mqp6-g2gh","url":"https://osv.dev/vulnerability/GHSA-5q5w-mqp6-g2gh"}],"summary":"Unrestricted Upload of File with Dangerous Type in jsdecena/laracom"}