{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.0"}],"component":"islandora/crayfish","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c2p2-hgjg-9r3f","id":"tcs_01M5KF0EHF7VYK612YF2AQ434R","modified_at":"2025-02-12T21:25:37.518936Z","published_at":"2025-02-12T21:05:47Z","references":["https://osv.dev/vulnerability/GHSA-c2p2-hgjg-9r3f","https://github.com/Islandora/Crayfish/security/advisories/GHSA-c2p2-hgjg-9r3f","https://github.com/Islandora/Crayfish"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-c2p2-hgjg-9r3f","url":"https://osv.dev/vulnerability/GHSA-c2p2-hgjg-9r3f"}],"summary":"Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header"}