{"action":"Upgrade fixpunkt/fp-newsletter to 1.1.1 or later.","affected":[{"fixed":"3.2.6","introduced":"2.2.0"},{"fixed":"2.1.2","introduced":"2.0.0"},{"fixed":"1.1.1","introduced":"0"}],"component":"fixpunkt/fp-newsletter","cve_ids":["CVE-2022-47408"],"ecosystem":"Packagist","epss":0.00694,"exploited":false,"fixed_versions":["3.2.6","2.1.2","1.1.1"],"ghsa_id":"GHSA-f683-35w9-28g5","id":"tcs_01M5KF1GN2W4RMMESMHB54TNCZ","modified_at":"2023-11-08T04:11:00.229087Z","published_at":"2022-12-14T21:30:16Z","references":["https://osv.dev/vulnerability/GHSA-f683-35w9-28g5","https://nvd.nist.gov/vuln/detail/CVE-2022-47408","https://github.com/bihor/fp_newsletter/commit/bc673cd9ab04f3fdd1225303f2ccb378b11a3747","https://github.com/FriendsOfPHP/security-advisories/blob/master/fixpunkt/fp-newsletter/CVE-2022-47408.yaml","https://github.com/bihor/fp_newsletter","https://typo3.org/security/advisory/typo3-ext-sa-2022-017"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-f683-35w9-28g5","url":"https://osv.dev/vulnerability/GHSA-f683-35w9-28g5"}],"summary":"Multiple vulnerabilities in extension \"Newsletter subscriber management\" (fp_newsletter)"}