{"action":"Upgrade mikehaertl/php-shellcommand to 1.6.1 or later.","affected":[{"fixed":"1.6.1","introduced":"0"}],"component":"mikehaertl/php-shellcommand","cve_ids":["CVE-2019-10774"],"ecosystem":"Packagist","epss":0.04626,"exploited":false,"fixed_versions":["1.6.1"],"ghsa_id":"GHSA-c7fv-wv9f-cgjw","id":"tcs_01M5KF0Q0FZXEYPSJSNF0ZKECZ","modified_at":"2026-07-08T05:56:32.220013502Z","published_at":"2022-05-24T17:05:15Z","references":["https://osv.dev/vulnerability/GHSA-c7fv-wv9f-cgjw","https://nvd.nist.gov/vuln/detail/CVE-2019-10774","https://github.com/mikehaertl/php-shellcommand/commit/8d98d8536e05abafe76a491da87296d824939076","https://github.com/mikehaertl/php-shellcommand","https://snyk.io/vuln/SNYK-PHP-MIKEHAERTLPHPSHELLCOMMAND-538426"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-c7fv-wv9f-cgjw","url":"https://osv.dev/vulnerability/GHSA-c7fv-wv9f-cgjw"}],"summary":"php-shellcommand command injection vulnerability"}