{"action":"Upgrade pxlrbt/filament-excel to 1.1.14 or later.","affected":[{"fixed":"2.3.3","introduced":"2.0.0-alpha"},{"fixed":"1.1.14","introduced":"0"}],"component":"pxlrbt/filament-excel","cve_ids":["CVE-2024-42485"],"ecosystem":"Packagist","epss":0.0057,"exploited":false,"fixed_versions":["2.3.3","1.1.14"],"ghsa_id":"GHSA-m3px-vjxr-fx4m","id":"tcs_01M5KF537814CTHTNXN805MQQT","modified_at":"2024-09-16T15:01:49.508848Z","published_at":"2024-08-12T18:36:10Z","references":["https://osv.dev/vulnerability/GHSA-m3px-vjxr-fx4m","https://github.com/pxlrbt/filament-excel/security/advisories/GHSA-m3px-vjxr-fx4m","https://nvd.nist.gov/vuln/detail/CVE-2024-42485","https://github.com/pxlrbt/filament-excel/commit/af36f933b032aefccc87d17431b6e74673b04af5","https://github.com/pxlrbt/filament-excel/commit/bda42891a4b0c15d5dab5da8c53a006ddadccfb7","https://github.com/pxlrbt/filament-excel","https://github.com/pxlrbt/filament-excel/releases/tag/v1.1.14"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m3px-vjxr-fx4m","url":"https://osv.dev/vulnerability/GHSA-m3px-vjxr-fx4m"}],"summary":"Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint"}