{"action":"Upgrade php-censor/php-censor to 2.0.13 or later.","affected":[{"fixed":"2.1.5","introduced":"2.1.0"},{"fixed":"2.0.13","introduced":"0"}],"component":"php-censor/php-censor","cve_ids":["CVE-2024-34914"],"ecosystem":"Packagist","epss":0.00283,"exploited":false,"fixed_versions":["2.1.5","2.0.13"],"ghsa_id":"GHSA-fqw7-839j-hvxj","id":"tcs_01M5KF208HZ32SAA00MZJST5E4","modified_at":"2024-05-19T02:24:47.080051Z","published_at":"2024-05-14T18:31:02Z","references":["https://osv.dev/vulnerability/GHSA-fqw7-839j-hvxj","https://nvd.nist.gov/vuln/detail/CVE-2024-34914","https://github.com/php-censor/php-censor/commit/7b011d1b60f543e6ed814315a285cc80074d12e5","https://chmod744.super.site/redacted-vulnerability","https://github.com/php-censor/php-censor"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-fqw7-839j-hvxj","url":"https://osv.dev/vulnerability/GHSA-fqw7-839j-hvxj"}],"summary":"PHP Censor uses a weak hashing algorithm for the remember me key"}