{"action":"Upgrade latte/latte to 2.10.6 or later.","affected":[{"fixed":"2.10.6","introduced":"0"}],"component":"latte/latte","cve_ids":["CVE-2021-23803"],"ecosystem":"Packagist","epss":0.01628,"exploited":false,"fixed_versions":["2.10.6"],"ghsa_id":"GHSA-6pj2-5fqq-xvjc","id":"tcs_01M5KEX859GN8ZVCK5EKQC9R53","modified_at":"2026-07-08T06:49:54.495161266Z","published_at":"2022-01-06T20:56:27Z","references":["https://osv.dev/vulnerability/GHSA-6pj2-5fqq-xvjc","https://nvd.nist.gov/vuln/detail/CVE-2021-23803","https://github.com/nette/latte/issues/279","https://github.com/nette/latte/commit/227c86eda9a8a6d060ea8501923e768b6d992210","https://github.com/nette/latte","https://snyk.io/vuln/SNYK-PHP-LATTELATTE-1932226"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6pj2-5fqq-xvjc","url":"https://osv.dev/vulnerability/GHSA-6pj2-5fqq-xvjc"}],"summary":"Incorrect Authorization in latte/latte"}