{"action":"Upgrade laravel/pulse to 1.3.1 or later.","affected":[{"fixed":"1.3.1","introduced":"0"}],"component":"laravel/pulse","cve_ids":["CVE-2024-55661"],"ecosystem":"Packagist","epss":0.30649,"exploited":false,"fixed_versions":["1.3.1"],"ghsa_id":"GHSA-8vwh-pr89-4mw2","id":"tcs_01M5KEZC6FPNWWMZ4MN7S83SJP","modified_at":"2024-12-17T18:26:56.935947Z","published_at":"2024-12-13T20:35:43Z","references":["https://osv.dev/vulnerability/GHSA-8vwh-pr89-4mw2","https://github.com/laravel/pulse/security/advisories/GHSA-8vwh-pr89-4mw2","https://nvd.nist.gov/vuln/detail/CVE-2024-55661","https://github.com/laravel/pulse/commit/d1a5bf2eca36c6e3bedb4ceecd45df7d002a1ebc","https://github.com/laravel/pulse"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-8vwh-pr89-4mw2","url":"https://osv.dev/vulnerability/GHSA-8vwh-pr89-4mw2"},{"source":"nvd","source_id":"CVE-2024-55661","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55661"}],"summary":"Laravel Pulse Allows Remote Code Execution via Unprotected Query Method"}