{"action":"Upgrade area17/twill to 1.2.5 or later.","affected":[{"fixed":"1.2.5","introduced":"0"},{"fixed":"2.5.3","introduced":"2.0.0"}],"component":"area17/twill","cve_ids":["CVE-2021-3932"],"ecosystem":"Packagist","epss":0.00406,"exploited":false,"fixed_versions":["1.2.5","2.5.3"],"ghsa_id":"GHSA-f99g-pg48-wrfc","id":"tcs_01M5KF1N124TETGBYQXYM79NB4","modified_at":"2023-11-08T04:06:35.583530Z","published_at":"2021-11-15T23:19:26Z","references":["https://osv.dev/vulnerability/GHSA-f99g-pg48-wrfc","https://nvd.nist.gov/vuln/detail/CVE-2021-3932","https://github.com/area17/twill/commit/5cded9fc","https://github.com/area17/twill/commit/81d80d1fbbdd8bb73c020f03c623fd4487bd9b78","https://github.com/area17/twill","https://github.com/area17/twill/commits/bab94c1e","https://github.com/area17/twill/releases/tag/1.2.5","https://github.com/area17/twill/releases/tag/2.5.3","https://huntr.dev/bounties/6ef21e34-f6d9-445a-b657-375c53dc2b43"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-f99g-pg48-wrfc","url":"https://osv.dev/vulnerability/GHSA-f99g-pg48-wrfc"}],"summary":"twill is vulnerable to Cross-Site Request Forgery (CSRF)"}