{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"4.0.0.0"}],"component":"opencart/opencart","cve_ids":["CVE-2024-21518"],"ecosystem":"Packagist","epss":0.14126,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m7r8-2r98-vppj","id":"tcs_01M5KF59GWZ07CHDS6T750B5A0","modified_at":"2026-09-10T03:50:15.593365980Z","published_at":"2024-06-22T06:30:37Z","references":["https://osv.dev/vulnerability/GHSA-m7r8-2r98-vppj","https://nvd.nist.gov/vuln/detail/CVE-2024-21518","https://github.com/opencart/opencart","https://github.com/opencart/opencart/blob/04c1724370ab02967d3b4f668c1b67771ecf1ff4/upload/admin/controller/marketplace/installer.php%23L383C1-L383C1","https://security.snyk.io/vuln/SNYK-PHP-OPENCARTOPENCART-7266578"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-m7r8-2r98-vppj","url":"https://osv.dev/vulnerability/GHSA-m7r8-2r98-vppj"}],"summary":"Zip slip in opencart"}