{"action":"Upgrade drupal/drupal to 7.60 or later.","affected":[{"fixed":"7.60","introduced":"7.0"},{"fixed":"8.5.8","introduced":"8.0.0"},{"fixed":"8.6.2","introduced":"8.6.0"}],"component":"drupal/drupal","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.60","8.5.8","8.6.2"],"ghsa_id":"GHSA-jf8c-36vw-98x4","id":"tcs_01M5KF4GF34F02XXB5P6DD32H7","modified_at":"2024-11-29T05:25:52.881874Z","published_at":"2024-05-15T20:59:25Z","references":["https://osv.dev/vulnerability/GHSA-jf8c-36vw-98x4","https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-4.yaml","https://github.com/drupal/drupal","https://www.drupal.org/sa-core-2018-006"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-jf8c-36vw-98x4","url":"https://osv.dev/vulnerability/GHSA-jf8c-36vw-98x4"}],"summary":"Drupal core Remote Code Execution"}