{"action":"Upgrade facade/ignition to 1.16.15 or later.","affected":[{"fixed":"2.0.5","introduced":"2.0.0"},{"fixed":"1.16.15","introduced":"0"}],"component":"facade/ignition","cve_ids":["CVE-2020-13909"],"ecosystem":"Packagist","epss":0.01516,"exploited":false,"fixed_versions":["2.0.5","1.16.15"],"ghsa_id":"GHSA-m5v7-pr32-mjx2","id":"tcs_01M5KF56E8W3XB6RW4YHGZQ2HQ","modified_at":"2024-12-02T05:42:00.877470Z","published_at":"2021-10-12T16:29:13Z","references":["https://osv.dev/vulnerability/GHSA-m5v7-pr32-mjx2","https://nvd.nist.gov/vuln/detail/CVE-2020-13909","https://github.com/github/advisory-database/issues/2316","https://github.com/facade/ignition","https://github.com/facade/ignition/compare/2.0.4...2.0.5","https://github.com/facade/ignition/releases/tag/2.0.5","https://www.cve.org/CVERecord?id=CVE-2020-13909"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m5v7-pr32-mjx2","url":"https://osv.dev/vulnerability/GHSA-m5v7-pr32-mjx2"}],"summary":"Critical severity vulnerability in Ignition"}