{"action":"Upgrade cachethq/cachet to 2.5.1 or later.","affected":[{"fixed":"2.5.1","introduced":"0"}],"component":"cachethq/cachet","cve_ids":["CVE-2021-39174"],"ecosystem":"Packagist","epss":0.05011,"exploited":false,"fixed_versions":["2.5.1"],"ghsa_id":"GHSA-88f9-7xxh-c688","id":"tcs_01M5KEYTFSHFBJD17C1Y1PZKYC","modified_at":"2026-07-08T06:27:25.728327136Z","published_at":"2021-08-30T16:11:43Z","references":["https://osv.dev/vulnerability/GHSA-88f9-7xxh-c688","https://github.com/fiveai/Cachet/security/advisories/GHSA-88f9-7xxh-c688","https://nvd.nist.gov/vuln/detail/CVE-2021-39174","https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection","https://github.com/cachethq/Cachet","https://github.com/fiveai/Cachet/releases/tag/v2.5.1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-88f9-7xxh-c688","url":"https://osv.dev/vulnerability/GHSA-88f9-7xxh-c688"}],"summary":"Cachet configuration leak"}