{"action":"Upgrade ezsystems/ezpublish-kernel to 7.5.31 or later.","affected":[{"fixed":"7.5.31","introduced":"7.5.0"}],"component":"ezsystems/ezpublish-kernel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.5.31"],"ghsa_id":"GHSA-946c-f9w6-2c25","id":"tcs_01M5KEZKP09BFX1HV54M8MEYNN","modified_at":"2024-12-04T05:39:33.409249Z","published_at":"2023-11-03T18:45:11Z","references":["https://osv.dev/vulnerability/GHSA-946c-f9w6-2c25","https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-946c-f9w6-2c25","https://github.com/ezsystems/ezpublish-kernel/commit/142152f9bae4c4835713df0bdfe22bc98d03f9a1","https://github.com/ezsystems/ezpublish-kernel"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-946c-f9w6-2c25","url":"https://osv.dev/vulnerability/GHSA-946c-f9w6-2c25"}],"summary":"Download route allows filename change in eZpublish kernel"}