{"action":"Upgrade silverstripe/framework to 3.1.12 or later.","affected":[{"fixed":"3.1.12","introduced":"0"}],"component":"silverstripe/framework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.1.12"],"ghsa_id":"GHSA-g43w-98wp-m694","id":"tcs_01M5KF29GBZPP70YVK0PN7685G","modified_at":"2024-11-28T05:40:41.741946Z","published_at":"2024-05-23T14:49:39Z","references":["https://osv.dev/vulnerability/GHSA-g43w-98wp-m694","https://github.com/silverstripe/silverstripe-framework/commit/7f983c2bae1dc78ca7217e9af364b2fb71dcefe8","https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2014-017-1.yaml","https://github.com/silverstripe/silverstripe-framework","https://www.silverstripe.org/software/download/security-releases/ss-2014-017-xml-quadratic-blowup-attack"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-g43w-98wp-m694","url":"https://osv.dev/vulnerability/GHSA-g43w-98wp-m694"}],"summary":"SilverStripe framework XML Quadratic Blowup Attack"}