{"action":"Upgrade pimcore/data-importer to 1.8.9 or later.","affected":[{"fixed":"1.8.9","introduced":"0"},{"fixed":"1.9.3","introduced":"1.9.0"}],"component":"pimcore/data-importer","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.8.9","1.9.3"],"ghsa_id":"GHSA-hq76-662x-7mw4","id":"tcs_01M5KF3V4HCWTH201PWSH9KSDN","modified_at":"2024-12-05T05:28:51.120085Z","published_at":"2024-09-03T19:45:26Z","references":["https://osv.dev/vulnerability/GHSA-hq76-662x-7mw4","https://github.com/pimcore/pimcore/security/advisories/GHSA-hq76-662x-7mw4","https://github.com/advisories/GHSA-ghg6-32f9-2jp7","https://github.com/pimcore/pimcore"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-hq76-662x-7mw4","url":"https://osv.dev/vulnerability/GHSA-hq76-662x-7mw4"}],"summary":"Pimcore includes vulnerable PHPOffice/PhpSpreadsheet"}