{"action":"Upgrade directmailteam/direct-mail to 5.2.3 or later.","affected":[{"fixed":"5.2.3","introduced":"0"}],"component":"directmailteam/direct-mail","cve_ids":["CVE-2019-16698"],"ecosystem":"Packagist","epss":0.00685,"exploited":false,"fixed_versions":["5.2.3"],"ghsa_id":"GHSA-j2w4-45qm-r674","id":"tcs_01M5KF442D13E044A1HR34GXWP","modified_at":"2024-02-22T05:31:51.534332Z","published_at":"2022-05-24T16:58:55Z","references":["https://osv.dev/vulnerability/GHSA-j2w4-45qm-r674","https://nvd.nist.gov/vuln/detail/CVE-2019-16698","https://github.com/kartolo/direct_mail/commit/3a70924777294c7fb40e9f6eb3f7627bac58dfd1","https://extensions.typo3.org/extension/direct_mail","https://github.com/kartolo/direct_mail","https://typo3.org/security/advisory/typo3-ext-sa-2019-016"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-j2w4-45qm-r674","url":"https://osv.dev/vulnerability/GHSA-j2w4-45qm-r674"}],"summary":"direct_mail for Typo3 sensitive data exposure"}