{"action":"Upgrade facturascripts/facturascripts to 2026.3 or later.","affected":[{"fixed":"2026.3","introduced":"0"}],"component":"facturascripts/facturascripts","cve_ids":["CVE-2026-47677"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2026.3"],"ghsa_id":"GHSA-c67f-gmxw-mj93","id":"tcs_01M5KF0NFA37CPK06TQ39B6DG5","modified_at":"2026-07-13T23:56:39.400535Z","published_at":"2026-07-13T23:35:48Z","references":["https://osv.dev/vulnerability/GHSA-c67f-gmxw-mj93","https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-c67f-gmxw-mj93","https://github.com/NeoRazorX/facturascripts","https://github.com/NeoRazorX/facturascripts/releases/tag/v2026.3"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-c67f-gmxw-mj93","url":"https://osv.dev/vulnerability/GHSA-c67f-gmxw-mj93"}],"summary":"FacturaScripts: Account takeover of any 2FA-enabled user"}