{"action":"Upgrade openmage/magento-lts to 19.4.6 or later.","affected":[{"fixed":"19.4.6","introduced":"0"},{"fixed":"20.0.2","introduced":"20.0.0"}],"component":"openmage/magento-lts","cve_ids":["CVE-2020-15151"],"ecosystem":"Packagist","epss":0.00931,"exploited":false,"fixed_versions":["19.4.6","20.0.2"],"ghsa_id":"GHSA-crf2-xm6x-46p6","id":"tcs_01M5KF15WP55DM365GEM1MC66R","modified_at":"2026-07-08T05:59:57.116725687Z","published_at":"2020-08-19T18:02:36Z","references":["https://osv.dev/vulnerability/GHSA-crf2-xm6x-46p6","https://github.com/OpenMage/magento-lts/security/advisories/GHSA-crf2-xm6x-46p6","https://nvd.nist.gov/vuln/detail/CVE-2020-15151","https://github.com/OpenMage/magento-lts/commit/7c526bc6a6a51b57a1bab4c60f104dc36cde347a","https://github.com/OpenMage/magento-lts","https://helpx.adobe.com/security/products/magento/apsb20-47.html"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-crf2-xm6x-46p6","url":"https://osv.dev/vulnerability/GHSA-crf2-xm6x-46p6"}],"summary":"Observable Timing Discrepancy in OpenMage LTS"}