{"action":"Upgrade tecnickcom/tcpdf to 6.8.0 or later.","affected":[{"fixed":"6.8.0","introduced":"0"}],"component":"tecnickcom/tcpdf","cve_ids":["CVE-2024-56521"],"ecosystem":"Packagist","epss":0.00785,"exploited":false,"fixed_versions":["6.8.0"],"ghsa_id":"GHSA-9mgx-552f-59p6","id":"tcs_01M5KF063B53JWKSX8QWCVRFV2","modified_at":"2024-12-27T20:12:10.509042Z","published_at":"2024-12-27T06:30:47Z","references":["https://osv.dev/vulnerability/GHSA-9mgx-552f-59p6","https://nvd.nist.gov/vuln/detail/CVE-2024-56521","https://github.com/tecnickcom/TCPDF/commit/aab43ab0a824e956276141a28a24c7c0be20f554","https://github.com/tecnickcom/TCPDF","https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0","https://tcpdf.org"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-9mgx-552f-59p6","url":"https://osv.dev/vulnerability/GHSA-9mgx-552f-59p6"},{"source":"nvd","source_id":"CVE-2024-56521","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56521"}],"summary":"TCPDF missing certificate validation"}