{"action":"Upgrade cachethq/cachet to 2.5.1 or later.","affected":[{"fixed":"2.5.1","introduced":"0"}],"component":"cachethq/cachet","cve_ids":["CVE-2021-39172"],"ecosystem":"Packagist","epss":0.29172,"exploited":false,"fixed_versions":["2.5.1"],"ghsa_id":"GHSA-9jxw-cfrh-jxq6","id":"tcs_01M5KF058J5XV117PRD6QQ9MFA","modified_at":"2026-07-08T06:28:23.404206493Z","published_at":"2021-08-30T16:11:24Z","references":["https://osv.dev/vulnerability/GHSA-9jxw-cfrh-jxq6","https://github.com/fiveai/Cachet/security/advisories/GHSA-9jxw-cfrh-jxq6","https://nvd.nist.gov/vuln/detail/CVE-2021-39172","https://github.com/fiveai/Cachet/commit/6442976c25930cb370c65a22784b9caee7ed1de2","https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection","https://github.com/fiveai/Cachet","https://github.com/fiveai/Cachet/releases/tag/v2.5.1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9jxw-cfrh-jxq6","url":"https://osv.dev/vulnerability/GHSA-9jxw-cfrh-jxq6"}],"summary":"Cachet vulnerable to new line injection during configuration edition"}