{"action":"Upgrade kevinpapst/kimai2 to 1.14.1 or later.","affected":[{"fixed":"1.14.1","introduced":"0"}],"component":"kevinpapst/kimai2","cve_ids":["CVE-2021-43515"],"ecosystem":"Packagist","epss":0.01014,"exploited":false,"fixed_versions":["1.14.1"],"ghsa_id":"GHSA-64fq-9c6w-rq44","id":"tcs_01M5KEWM2WJ2TDN4Q8ZKC3EB47","modified_at":"2023-11-08T04:07:10.034667Z","published_at":"2022-04-09T00:00:25Z","references":["https://osv.dev/vulnerability/GHSA-64fq-9c6w-rq44","https://nvd.nist.gov/vuln/detail/CVE-2021-43515","https://github.com/kevinpapst/kimai2/pull/2532","https://github.com/kevinpapst/kimai2/commit/dad1b8b772947f1596175add1b4f33b791705507#diff-6774f5865dbaf8bc6c55b75bd92e6f9950ebe7834aa2efd828a19fd637e667cf","https://github.com/kevinpapst/kimai2"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-64fq-9c6w-rq44","url":"https://osv.dev/vulnerability/GHSA-64fq-9c6w-rq44"}],"summary":"Improper Neutralization of Formula Elements in a CSV File in Kimai 2"}