{"action":"Upgrade shopware/core to 6.4.3.1 or later.","affected":[{"fixed":"6.4.3.1","introduced":"0"}],"component":"shopware/core","cve_ids":["CVE-2021-37710"],"ecosystem":"Packagist","epss":0.00736,"exploited":false,"fixed_versions":["6.4.3.1"],"ghsa_id":"GHSA-fc38-mxwr-pfhx","id":"tcs_01M5KF1P322WS3Q952D7EM3VVF","modified_at":"2026-09-10T03:49:07.906639354Z","published_at":"2021-08-23T19:43:00Z","references":["https://osv.dev/vulnerability/GHSA-fc38-mxwr-pfhx","https://github.com/shopware/platform/security/advisories/GHSA-fc38-mxwr-pfhx","https://nvd.nist.gov/vuln/detail/CVE-2021-37710","https://github.com/shopware/platform/commit/abe9f69e1f667800f974acccd3047b4930e4b423","https://github.com/shopware/platform"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-fc38-mxwr-pfhx","url":"https://osv.dev/vulnerability/GHSA-fc38-mxwr-pfhx"}],"summary":"Cross-Site Scripting via SVG media files"}