{"action":"Upgrade nukeviet/nukeviet to 4.0.29 or later.","affected":[{"fixed":"4.0.29","introduced":"4.0"},{"fixed":"4.1.02","introduced":"4.1"},{"fixed":"4.2.01","introduced":"4.2"}],"component":"nukeviet/nukeviet","cve_ids":["CVE-2020-21809"],"ecosystem":"Packagist","epss":0.01576,"exploited":false,"fixed_versions":["4.0.29","4.1.02","4.2.01"],"ghsa_id":"GHSA-m8jx-mxf9-2rpw","id":"tcs_01M5KF5AZE40TTDQJG52D4STWA","modified_at":"2024-04-24T20:13:32.883170Z","published_at":"2022-05-24T19:09:25Z","references":["https://osv.dev/vulnerability/GHSA-m8jx-mxf9-2rpw","https://nvd.nist.gov/vuln/detail/CVE-2020-21809","https://github.com/nukeviet/module-shops/commit/742c0e0f74364f7250c2a69f0a957d4e6317be68","https://github.com/nukeviet/nukeviet","https://nukeviet.vn/vi/news/Tin-an-ninh/huong-dan-fix-loi-bao-mat-nukeviet-4-va-module-shops-612.html","https://whitehub.net/submissions/1517","https://whitehub.net/submissions/1518"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m8jx-mxf9-2rpw","url":"https://osv.dev/vulnerability/GHSA-m8jx-mxf9-2rpw"}],"summary":"NukeViet SQL Injection vulnerability"}