{"action":"No fix published. Pin and monitor.","affected":[],"component":"aimeos/aimeos-laravel","cve_ids":["CVE-2021-47763"],"ecosystem":"Packagist","epss":0.00337,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hm9j-cgmm-2w36","id":"tcs_01M5KF3RHYQ3GZ5MSJG0J1B00K","modified_at":"2026-02-03T03:26:18.290922Z","published_at":"2026-01-15T18:31:30Z","references":["https://osv.dev/vulnerability/GHSA-hm9j-cgmm-2w36","https://nvd.nist.gov/vuln/detail/CVE-2021-47763","https://aimeos.org","https://aimeos.org/laravel-ecommerce-package","https://github.com/aimeos/aimeos-laravel","https://www.exploit-db.com/exploits/50538"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-hm9j-cgmm-2w36","url":"https://osv.dev/vulnerability/GHSA-hm9j-cgmm-2w36"}],"summary":"Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter"}