{"action":"Upgrade timber/timber to 1.23.1 or later.","affected":[{"fixed":"2.1.0","introduced":"2.0.0"},{"fixed":"1.24.1","introduced":"1.24.0"},{"fixed":"1.23.1","introduced":"0.16.6"}],"component":"timber/timber","cve_ids":["CVE-2024-29800"],"ecosystem":"Packagist","epss":0.00454,"exploited":false,"fixed_versions":["2.1.0","1.24.1","1.23.1"],"ghsa_id":"GHSA-6363-v5m4-fvq3","id":"tcs_01M5KEWJS7B6SEC64NYQRPF9D6","modified_at":"2024-04-18T16:49:10.797058Z","published_at":"2024-04-12T15:15:46Z","references":["https://osv.dev/vulnerability/GHSA-6363-v5m4-fvq3","https://github.com/timber/timber/security/advisories/GHSA-6363-v5m4-fvq3","https://github.com/timber/timber/issues/2971","https://github.com/timber/timber/commit/13c6b0f60346304f2eed4da1e0bb51566518de4a","https://github.com/FriendsOfPHP/security-advisories/blob/master/timber/timber/CVE-2024-29800.yaml","https://github.com/timber/timber"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-6363-v5m4-fvq3","url":"https://osv.dev/vulnerability/GHSA-6363-v5m4-fvq3"}],"summary":"timber/timber vulnerable to Deserialization of Untrusted Data"}