{"action":"Upgrade typo3/neos to 2.3.99 or later.","affected":[{"fixed":"2.3.99","introduced":"2.3.0"},{"fixed":"3.0.20","introduced":"3.0.0"},{"fixed":"3.1.18","introduced":"3.1.0"},{"fixed":"3.2.14","introduced":"3.2.0"},{"fixed":"3.3.23","introduced":"3.3.0"},{"fixed":"4.0.17","introduced":"4.0.0"},{"fixed":"4.1.16","introduced":"4.1.0"},{"fixed":"4.2.12","introduced":"4.2.0"},{"fixed":"4.3.3","introduced":"4.3.0"}],"component":"typo3/neos","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.3.99","3.0.20","3.1.18","3.2.14","3.3.23","4.0.17","4.1.16","4.2.12","4.3.3"],"ghsa_id":"GHSA-g4xv-r3qw-v3q2","id":"tcs_01M5KF2BCXE3WXJ1CG7SGGB857","modified_at":"2024-12-02T06:00:02.077775Z","published_at":"2024-06-05T18:33:01Z","references":["https://osv.dev/vulnerability/GHSA-g4xv-r3qw-v3q2","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/neos/2019-06-17.yaml","https://github.com/mneuhaus/TYPO3.Neos","https://www.neos.io/blog/neos-workspace-disclosure-security.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g4xv-r3qw-v3q2","url":"https://osv.dev/vulnerability/GHSA-g4xv-r3qw-v3q2"}],"summary":"typo3 Information Disclosure Security Note"}