{"action":"Upgrade smarty/smarty to 3.0.0-beta4 or later.","affected":[{"fixed":"3.0.0-beta4","introduced":"0"}],"component":"smarty/smarty","cve_ids":["CVE-2009-5054"],"ecosystem":"Packagist","epss":0.01589,"exploited":false,"fixed_versions":["3.0.0-beta4"],"ghsa_id":"GHSA-6m9f-8vwq-97pm","id":"tcs_01M5KEX6CH175M55ZZHJAX0FJA","modified_at":"2024-12-04T05:46:50.965677Z","published_at":"2022-05-02T04:00:47Z","references":["https://osv.dev/vulnerability/GHSA-6m9f-8vwq-97pm","https://nvd.nist.gov/vuln/detail/CVE-2009-5054","https://github.com/smarty-php/smarty","https://web.archive.org/web/20101116174040/http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-6m9f-8vwq-97pm","url":"https://osv.dev/vulnerability/GHSA-6m9f-8vwq-97pm"}],"summary":"Smarty Does Not Consider Umask Values When Setting Permissions"}