{"action":"Upgrade showdoc/showdoc to 2.9.6 or later.","affected":[{"fixed":"2.9.6","introduced":"0"}],"component":"showdoc/showdoc","cve_ids":["CVE-2021-36440"],"ecosystem":"Packagist","epss":0.04762,"exploited":false,"fixed_versions":["2.9.6"],"ghsa_id":"GHSA-c442-3278-rhrg","id":"tcs_01M5KF0HS6CVF7AZ0VHS0JT09F","modified_at":"2023-11-08T04:06:14.456803Z","published_at":"2021-09-09T17:08:46Z","references":["https://osv.dev/vulnerability/GHSA-c442-3278-rhrg","https://nvd.nist.gov/vuln/detail/CVE-2021-36440","https://github.com/star7th/showdoc/issues/1406","https://github.com/star7th/showdoc/commit/49b992d4c548c8c615a92b6efe8a50c8f1083abf","https://github.com/star7th/showdoc"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-c442-3278-rhrg","url":"https://osv.dev/vulnerability/GHSA-c442-3278-rhrg"}],"summary":"Unrestricted File Upload in ShowDoc v2.9.5"}