{"action":"Upgrade james-heinrich/getid3 to 1.9.9 or later.","affected":[{"fixed":"1.9.9","introduced":"0"}],"component":"james-heinrich/getid3","cve_ids":["CVE-2014-2053"],"ecosystem":"Packagist","epss":0.04681,"exploited":false,"fixed_versions":["1.9.9"],"ghsa_id":"GHSA-5v43-55m5-qr8f","id":"tcs_01M5KEWCGNXXWQAS8KZ0HCAGFQ","modified_at":"2025-03-31T13:53:44.600727Z","published_at":"2022-05-17T03:06:13Z","references":["https://osv.dev/vulnerability/GHSA-5v43-55m5-qr8f","https://nvd.nist.gov/vuln/detail/CVE-2014-2053","https://github.com/JamesHeinrich/getID3/commit/afbdaa044a9a0a9dff2f800bd670e231b3ec99b2","https://github.com/FriendsOfPHP/security-advisories/blob/master/james-heinrich/getid3/CVE-2014-2053.yaml","https://github.com/JamesHeinrich/getID3","https://wordpress.org/news/2014/08/wordpress-3-9-2","http://getid3.sourceforge.net/source/changelog.txt","http://owncloud.org/about/security/advisories/oC-SA-2014-006","http://secunia.com/advisories/58002","http://www.debian.org/security/2014/dsa-3001"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-5v43-55m5-qr8f","url":"https://osv.dev/vulnerability/GHSA-5v43-55m5-qr8f"}],"summary":"getID3 is vulnerable to XML External Entity (XXE)"}