{"action":"Upgrade ibexa/fieldtype-richtext to 4.6.19 or later.","affected":[{"fixed":"4.6.19","introduced":"4.6.0-beta1"}],"component":"ibexa/fieldtype-richtext","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.6.19"],"ghsa_id":"GHSA-cj3w-g42v-wcj6","id":"tcs_01M5KF113SR2A7Q1FKV6DYGJ1P","modified_at":"2025-04-10T13:12:42.944694Z","published_at":"2025-04-10T12:26:50Z","references":["https://osv.dev/vulnerability/GHSA-cj3w-g42v-wcj6","https://github.com/ibexa/fieldtype-richtext/security/advisories/GHSA-cj3w-g42v-wcj6","https://github.com/ibexa/fieldtype-richtext/commit/823cba6b5ee2e81d7d74e622ce42c1451e8e1337","https://developers.ibexa.co/security-advisories/ibexa-sa-2025-002-xxe-vulnerability-in-richtext","https://github.com/ibexa/fieldtype-richtext"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-cj3w-g42v-wcj6","url":"https://osv.dev/vulnerability/GHSA-cj3w-g42v-wcj6"}],"summary":"ibexa/fieldtype-richtext allows access to external entities in XML"}