{"action":"Upgrade dbrisinajumi/d2files to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"dbrisinajumi/d2files","cve_ids":["CVE-2015-10018"],"ecosystem":"Packagist","epss":0.00708,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-68hv-8926-j34c","id":"tcs_01M5KEWVDY894X96H0A1Z4MB5V","modified_at":"2023-11-08T03:57:49.087432Z","published_at":"2023-01-06T15:30:45Z","references":["https://osv.dev/vulnerability/GHSA-68hv-8926-j34c","https://nvd.nist.gov/vuln/detail/CVE-2015-10018","https://github.com/DBRisinajumi/d2files/commit/b5767f2ec9d0f3cbfda7f13c84740e2179c90574","https://github.com/DBRisinajumi/d2files","https://github.com/DBRisinajumi/d2files/releases/tag/1.0.0","https://vuldb.com/?ctiid.217561","https://vuldb.com/?id.217561"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-68hv-8926-j34c","url":"https://osv.dev/vulnerability/GHSA-68hv-8926-j34c"}],"summary":"DBRisinajumi d2files SQL Injection vulnerability"}