{"action":"Upgrade nette/application to 2.0.19 or later.","affected":[{"fixed":"2.2.10","introduced":"2.2.0"},{"fixed":"2.3.14","introduced":"2.3.0"},{"fixed":"2.4.16","introduced":"2.4.0"},{"fixed":"3.0.6","introduced":"3.0.0"},{"fixed":"2.0.19","introduced":"2.0.0"},{"fixed":"2.1.13","introduced":"2.1.0"}],"component":"nette/application","cve_ids":["CVE-2020-15227"],"ecosystem":"Packagist","epss":0.34424,"exploited":false,"fixed_versions":["2.2.10","2.3.14","2.4.16","3.0.6","2.0.19","2.1.13"],"ghsa_id":"GHSA-8gv3-3j7f-wg94","id":"tcs_01M5KEZ1KTKA178TD3VRYR1BFE","modified_at":"2026-07-08T06:29:28.739222447Z","published_at":"2020-10-02T16:22:19Z","references":["https://osv.dev/vulnerability/GHSA-8gv3-3j7f-wg94","https://github.com/nette/application/security/advisories/GHSA-8gv3-3j7f-wg94","https://nvd.nist.gov/vuln/detail/CVE-2020-15227","https://blog.nette.org/en/cve-2020-15227-potential-remote-code-execution-vulnerability","https://github.com/FriendsOfPHP/security-advisories/blob/master/nette/application/CVE-2020-15227.yaml","https://github.com/nette/application","https://lists.debian.org/debian-lts-announce/2021/04/msg00003.html","https://packagist.org/packages/nette/application","https://packagist.org/packages/nette/nette"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-8gv3-3j7f-wg94","url":"https://osv.dev/vulnerability/GHSA-8gv3-3j7f-wg94"}],"summary":"Potential Remote Code Execution vulnerability"}