{"action":"Upgrade czim/file-handling to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"},{"fixed":"2.3.0","introduced":"2.0.0"}],"component":"czim/file-handling","cve_ids":["CVE-2024-47049"],"ecosystem":"Packagist","epss":0.00636,"exploited":false,"fixed_versions":["1.5.0","2.3.0"],"ghsa_id":"GHSA-6rgh-r6j3-3223","id":"tcs_01M5KEXBBB01NCDF2MVS0TEXDV","modified_at":"2025-03-19T15:44:55.450644Z","published_at":"2024-09-17T15:31:23Z","references":["https://osv.dev/vulnerability/GHSA-6rgh-r6j3-3223","https://nvd.nist.gov/vuln/detail/CVE-2024-47049","https://github.com/czim/file-handling/commit/95dfda850536bf35e684619598b9d02f4c97680d","https://github.com/czim/file-handling/commit/dcf879896efe3457f51af9c8eab9f70dfc709a99","https://github.com/czim/file-handling","https://github.com/czim/file-handling/blob/2.3.0/SECURITY.md"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-6rgh-r6j3-3223","url":"https://osv.dev/vulnerability/GHSA-6rgh-r6j3-3223"}],"summary":"czim/file-handling vulnerable to SSRF and directory traversal"}